cc-codeconductor 1.2.0 → 1.3.0

package/dist/index.js

@@ -83,7 +83,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "cc-codeconductor",
-    version: "1.2.0",
+    version: "1.3.0",
     description: "A multi-agent orchestration framework for AI-assisted software engineering workflows.",
     keywords: [
       "ai",
@@ -137,6 +137,9 @@ var init_package = __esm(() => {
       lint: "bun run scripts/lint.ts",
       "check:coverage": "bun run scripts/check-coverage.ts",
       "check:prompt-changelog": "bun run scripts/check-prompt-changelog.ts",
+      "check:drift": "bun run scripts/check-drift.ts",
+      "render:commands": "bun run scripts/render-agent-commands.ts",
+      "sync:skills": "bun run scripts/sync-shared-skills.ts",
       "release:patch": "bash release.sh patch",
       "release:minor": "bash release.sh minor",
       "release:major": "bash release.sh major",
@@ -4120,6 +4123,37 @@ var init_zod = __esm(() => {
   init_external();
 });
 
+// src/core/runner/runner-target.ts
+function isRunnerTarget(value) {
+  return RUNNER_TARGETS.includes(value);
+}
+function parseRunnerTarget(value) {
+  if (!isRunnerTarget(value)) {
+    throw new Error(`Invalid runner target: ${value}. Valid targets: ${RUNNER_TARGETS.join(", ")}`);
+  }
+  return value;
+}
+function getIndividualTargets(target) {
+  if (target === "all") {
+    return [...INDIVIDUAL_TARGETS];
+  }
+  return [target];
+}
+var RUNNER_TARGETS, INDIVIDUAL_TARGETS;
+var init_runner_target = __esm(() => {
+  RUNNER_TARGETS = [
+    "opencode",
+    "claude",
+    "codex",
+    "gemini",
+    "cursor",
+    "agy",
+    "pi",
+    "all"
+  ];
+  INDIVIDUAL_TARGETS = ["opencode", "claude", "codex", "gemini", "cursor", "agy", "pi"];
+});
+
 // node_modules/yaml/dist/nodes/identity.js
 var require_identity = __commonJS((exports) => {
   var ALIAS = Symbol.for("yaml.alias");
@@ -11119,15 +11153,24 @@ function err(error) {
 }
 
 // src/core/presets/package-paths.ts
+var exports_package_paths = {};
+__export(exports_package_paths, {
+  SRC_PRESETS_DIR: () => SRC_PRESETS_DIR,
+  SKILLS_REGISTRY_PATH: () => SKILLS_REGISTRY_PATH,
+  ROOT_PRESETS_DIR: () => ROOT_PRESETS_DIR,
+  POLICY_PATH: () => POLICY_PATH,
+  PACKAGE_ROOT: () => PACKAGE_ROOT
+});
 import { dirname, resolve, sep } from "node:path";
 import { fileURLToPath } from "node:url";
-var moduleDir, PACKAGE_ROOT, SRC_PRESETS_DIR, ROOT_PRESETS_DIR, POLICY_PATH;
+var moduleDir, PACKAGE_ROOT, SRC_PRESETS_DIR, ROOT_PRESETS_DIR, POLICY_PATH, SKILLS_REGISTRY_PATH;
 var init_package_paths = __esm(() => {
   moduleDir = dirname(fileURLToPath(import.meta.url));
   PACKAGE_ROOT = moduleDir.endsWith(`${sep}dist`) ? resolve(moduleDir, "..") : resolve(moduleDir, "..", "..", "..");
   SRC_PRESETS_DIR = resolve(PACKAGE_ROOT, "src", "presets");
   ROOT_PRESETS_DIR = resolve(PACKAGE_ROOT, "presets");
   POLICY_PATH = resolve(PACKAGE_ROOT, "policy.yml");
+  SKILLS_REGISTRY_PATH = resolve(PACKAGE_ROOT, "skills-registry.json");
 });
 
 // src/core/filesystem/credential-guard.ts
@@ -11263,6 +11306,9 @@ var exports_schemas = {};
 __export(exports_schemas, {
   validateWorkflowProfile: () => validateWorkflowProfile,
   validateTaskOutcome: () => validateTaskOutcome,
+  validateTargetCapabilities: () => validateTargetCapabilities,
+  validateSkillsRegistry: () => validateSkillsRegistry,
+  validateSkillFrontmatter: () => validateSkillFrontmatter,
   validateScorecardRecord: () => validateScorecardRecord,
   validateRunnerTarget: () => validateRunnerTarget,
   validateReviewerOutput: () => validateReviewerOutput,
@@ -11290,6 +11336,7 @@ __export(exports_schemas, {
   validateCouncilSpec: () => validateCouncilSpec,
   validateConsensusConfig: () => validateConsensusConfig,
   validateConfig: () => validateConfig,
+  validateCommandFrontmatter: () => validateCommandFrontmatter,
   validateCommandEnvelope: () => validateCommandEnvelope,
   validateClaudeAgentFile: () => validateClaudeAgentFile,
   validateCanonicalTaskCard: () => validateCanonicalTaskCard,
@@ -11306,9 +11353,12 @@ __export(exports_schemas, {
   TaskOutcomeStatusSchema: () => TaskOutcomeStatusSchema,
   TaskOutcomeSourceSchema: () => TaskOutcomeSourceSchema,
   TaskOutcomeSchema: () => TaskOutcomeSchema,
+  TargetCapabilitiesSchema: () => TargetCapabilitiesSchema,
   StrategicMemorySchema: () => StrategicMemorySchema,
   SpecAnalyzeReportSchema: () => SpecAnalyzeReportSchema,
   SpecAnalyzeFindingSchema: () => SpecAnalyzeFindingSchema,
+  SkillsRegistrySchema: () => SkillsRegistrySchema,
+  SkillFrontmatterSchema: () => SkillFrontmatterSchema,
   SentryWebhookSchema: () => SentryWebhookSchema,
   SentryStackFrameSchema: () => SentryStackFrameSchema,
   ScorecardVerdictSchema: () => ScorecardVerdictSchema,
@@ -11374,6 +11424,7 @@ __export(exports_schemas, {
   ConsensusConfigSchema: () => ConsensusConfigSchema,
   ConfidenceLevelSchema: () => ConfidenceLevelSchema,
   CompileCheckConfigSchema: () => CompileCheckConfigSchema,
+  CommandFrontmatterSchema: () => CommandFrontmatterSchema,
   CommandEnvelopeSchema: () => CommandEnvelopeSchema,
   CodeConductorConfigSchema: () => CodeConductorConfigSchema,
   ClaudeAgentFileSchema: () => ClaudeAgentFileSchema,
@@ -11397,6 +11448,15 @@ function validateCouncilSpec(data) {
 function validateProjectProfile(data) {
   return ProjectProfileSchema.parse(data);
 }
+function validateSkillFrontmatter(data) {
+  return SkillFrontmatterSchema.parse(data);
+}
+function validateCommandFrontmatter(data) {
+  return CommandFrontmatterSchema.parse(data);
+}
+function validateTargetCapabilities(data) {
+  return TargetCapabilitiesSchema.parse(data);
+}
 function validateConfig(data) {
   return CodeConductorConfigSchema.parse(data);
 }
@@ -11496,9 +11556,13 @@ function validateCanonicalTaskCard(data) {
 function validateProductEvent(data) {
   return ProductEventSchema.parse(data);
 }
-var CouncilAgentSpecSchema, CouncilSpecSchema, ProjectProfileSchema, CompileCheckConfigSchema, LoopConfigSchema, CodeConductorConfigSchema, RunnerTargetSchema, InstallStrategySchema, ManifestEntrySchema, InstallManifestSchema, ToolProviderNamesSchema, PermissionProviderNamesSchema, ModelConfigSchema, ContractTargetSchema, ContractFormatSchema, AgentContractSchema, CouncilFindingSchema, CouncilVerdictInputSchema, ConsensusConfigSchema, CouncilVerdictSchema, ClaudeAgentFileSchema, OpenCodeAgentFileSchema, SentryStackFrameSchema, SentryWebhookSchema, MemoryPointerSchema, MemoryIndexSchema, GoalTaskSchema, GoalGraphSchema, ConfidenceLevelSchema, ProductNodeTypeSchema, GraphRelationSchema, KnowledgeEntitySchema, DecisionSchema, EvidenceSchema, CanonicalTaskCardStatusSchema, CanonicalTaskCardSchema, ProductGraphNodeSchema, ProductGraphEdgeSchema, ProductGraphSchema, ProductMetaSchema, ProductEventTypeSchema, ProductEventSchema, OperationalStateSchema, StrategicMemorySchema, ImpactReportSchema, BusinessReviewOutputSchema, VerificationReportSchema, BacklogStatusSchema, BacklogTypeSchema, BacklogPrioritySchema, BacklogGlobalSchema, BacklogItemSchema, BacklogDocumentSchema, OpenspecTaskCardPhaseSchema, OpenspecTaskCardStatusSchema, OpenspecTaskCardSchema, OpenspecStateSchema, SpecAnalyzeFindingSchema, SpecAnalyzeReportSchema, WorkflowCommandSchema, CcepOutputFormatSchema, CommandEnvelopeSchema, WorkflowPhaseSchema, WorkflowRiskRuleSchema, WorkflowProfileSchema, ExecutionContextSchema, PlannerOutputSchema, AgentArtifactSchema, AgentOutputSchema, ImplementerTestsSchema, ImplementerOutputSchema, ReviewAxisSchema, ReviewFindingSchema, ReviewerOutputSchema, TechnicalPlanOutputSchema, ScorecardVerdictSchema, ScorecardCriterionIdSchema, ScorecardCriterionSchema, ScorecardRecordSchema, TaskOutcomeSourceSchema, TaskOutcomeStatusSchema, TaskOutcomeSchema, HarnessComponentIdSchema, HarnessComponentLayerSchema, HarnessToggleKindSchema, HarnessCatalogEntrySchema, HarnessCatalogSchema, HarnessOverlaySchema, HarnessExperimentSchema, HarnessSuiteTaskSchema, HarnessSuiteSchema, EvaluationIndexSchema, ExecutionProfileNameSchema, ExecutionProfileSchema;
+function validateSkillsRegistry(data) {
+  return SkillsRegistrySchema.parse(data);
+}
+var CouncilAgentSpecSchema, CouncilSpecSchema, ProjectProfileSchema, CompileCheckConfigSchema, LoopConfigSchema, CodeConductorConfigSchema, RunnerTargetSchema, InstallStrategySchema, ManifestEntrySchema, InstallManifestSchema, ToolProviderNamesSchema, PermissionProviderNamesSchema, ModelConfigSchema, SkillFrontmatterSchema, CommandFrontmatterSchema, TargetCapabilitiesSchema, ContractTargetSchema, ContractFormatSchema, AgentContractSchema, CouncilFindingSchema, CouncilVerdictInputSchema, ConsensusConfigSchema, CouncilVerdictSchema, ClaudeAgentFileSchema, OpenCodeAgentFileSchema, SentryStackFrameSchema, SentryWebhookSchema, MemoryPointerSchema, MemoryIndexSchema, GoalTaskSchema, GoalGraphSchema, ConfidenceLevelSchema, ProductNodeTypeSchema, GraphRelationSchema, KnowledgeEntitySchema, DecisionSchema, EvidenceSchema, CanonicalTaskCardStatusSchema, CanonicalTaskCardSchema, ProductGraphNodeSchema, ProductGraphEdgeSchema, ProductGraphSchema, ProductMetaSchema, ProductEventTypeSchema, ProductEventSchema, OperationalStateSchema, StrategicMemorySchema, ImpactReportSchema, BusinessReviewOutputSchema, VerificationReportSchema, BacklogStatusSchema, BacklogTypeSchema, BacklogPrioritySchema, BacklogGlobalSchema, BacklogItemSchema, BacklogDocumentSchema, OpenspecTaskCardPhaseSchema, OpenspecTaskCardStatusSchema, OpenspecTaskCardSchema, OpenspecStateSchema, SpecAnalyzeFindingSchema, SpecAnalyzeReportSchema, WorkflowCommandSchema, CcepOutputFormatSchema, CommandEnvelopeSchema, WorkflowPhaseSchema, WorkflowRiskRuleSchema, WorkflowProfileSchema, ExecutionContextSchema, PlannerOutputSchema, AgentArtifactSchema, AgentOutputSchema, ImplementerTestsSchema, ImplementerOutputSchema, ReviewAxisSchema, ReviewFindingSchema, ReviewerOutputSchema, TechnicalPlanOutputSchema, ScorecardVerdictSchema, ScorecardCriterionIdSchema, ScorecardCriterionSchema, ScorecardRecordSchema, TaskOutcomeSourceSchema, TaskOutcomeStatusSchema, TaskOutcomeSchema, HarnessComponentIdSchema, HarnessComponentLayerSchema, HarnessToggleKindSchema, HarnessCatalogEntrySchema, HarnessCatalogSchema, HarnessOverlaySchema, HarnessExperimentSchema, HarnessSuiteTaskSchema, HarnessSuiteSchema, EvaluationIndexSchema, ExecutionProfileNameSchema, ExecutionProfileSchema, SkillsRegistrySchema;
 var init_schemas = __esm(() => {
   init_zod();
+  init_runner_target();
   CouncilAgentSpecSchema = exports_external.object({
     id: exports_external.string(),
     role: exports_external.string(),
@@ -11550,7 +11614,7 @@ var init_schemas = __esm(() => {
       profile: exports_external.string().optional()
     }),
     defaults: exports_external.object({
-      target: exports_external.enum(["opencode", "claude", "codex", "gemini", "cursor", "agy"]),
+      target: exports_external.enum(INDIVIDUAL_TARGETS),
       overwrite: exports_external.boolean(),
       locale: exports_external.enum(["en", "es"]).optional().default("en")
     }),
@@ -11567,15 +11631,7 @@ var init_schemas = __esm(() => {
     }),
     loop: LoopConfigSchema.optional()
   });
-  RunnerTargetSchema = exports_external.enum([
-    "opencode",
-    "claude",
-    "codex",
-    "gemini",
-    "cursor",
-    "agy",
-    "all"
-  ]);
+  RunnerTargetSchema = exports_external.enum(RUNNER_TARGETS);
   InstallStrategySchema = exports_external.enum([
     "overwrite",
     "append",
@@ -11591,13 +11647,13 @@ var init_schemas = __esm(() => {
     template: exports_external.boolean().optional()
   });
   InstallManifestSchema = exports_external.object({
-    target: exports_external.enum(["opencode", "claude", "codex", "gemini", "cursor", "agy"]),
+    target: exports_external.enum(INDIVIDUAL_TARGETS),
     entries: exports_external.array(ManifestEntrySchema)
   });
   ToolProviderNamesSchema = exports_external.record(exports_external.string(), exports_external.string());
   PermissionProviderNamesSchema = exports_external.record(exports_external.string(), exports_external.string());
   ModelConfigSchema = exports_external.object({
-    target: exports_external.enum(["opencode", "claude", "codex", "gemini", "cursor", "agy"]),
+    target: exports_external.enum(INDIVIDUAL_TARGETS),
     agents: exports_external.record(exports_external.string(), exports_external.object({
       claude: exports_external.string().optional(),
       opencode: exports_external.string().optional(),
@@ -11605,11 +11661,37 @@ var init_schemas = __esm(() => {
       gemini: exports_external.string().optional(),
       cursor: exports_external.string().optional(),
       agy: exports_external.string().optional(),
+      pi: exports_external.string().optional(),
       grok: exports_external.string().optional()
     })),
     tools: exports_external.record(exports_external.string(), ToolProviderNamesSchema).optional(),
     permissions: PermissionProviderNamesSchema.optional()
   });
+  SkillFrontmatterSchema = exports_external.object({
+    name: exports_external.string().trim().min(1, "name must not be empty"),
+    description: exports_external.string().trim().min(1, "description must not be empty").max(1024, "description must be 1024 characters or fewer"),
+    id: exports_external.string().trim().min(1).optional()
+  }).passthrough();
+  CommandFrontmatterSchema = exports_external.object({
+    description: exports_external.string().trim().min(1, "description must not be empty").max(1024, "description must be 1024 characters or fewer"),
+    "argument-hint": exports_external.string().trim().min(1).optional(),
+    "allowed-tools": exports_external.string().trim().min(1).optional(),
+    model: exports_external.string().trim().min(1).optional(),
+    "disable-model-invocation": exports_external.boolean().optional()
+  }).passthrough();
+  TargetCapabilitiesSchema = exports_external.object({
+    target: exports_external.enum(INDIVIDUAL_TARGETS),
+    invocation: exports_external.enum(["colon", "hyphen", "dollar"]),
+    commandFormat: exports_external.enum(["markdown", "toml", "skill"]),
+    contextFile: exports_external.string().trim().min(1),
+    subagentInvocationStyle: exports_external.enum(["task-tool", "adopt-role", "invoke-with-context"]).optional(),
+    capabilities: exports_external.object({
+      subagents: exports_external.boolean(),
+      hooks: exports_external.boolean(),
+      mcp: exports_external.boolean(),
+      council: exports_external.boolean()
+    })
+  });
   ContractTargetSchema = exports_external.enum([
     "claude",
     "opencode",
@@ -12349,13 +12431,19 @@ var init_schemas = __esm(() => {
   ExecutionProfileNameSchema = exports_external.enum(["balanced", "quality", "economical"]);
   ExecutionProfileSchema = exports_external.object({
     profile: ExecutionProfileNameSchema.default("balanced"),
-    target: exports_external.enum(["opencode", "claude", "codex", "gemini", "cursor", "agy"]).optional(),
+    target: exports_external.enum(INDIVIDUAL_TARGETS).optional(),
     overrides: exports_external.record(exports_external.string(), exports_external.string()).optional().default({}),
     subagentPolicy: exports_external.object({
       orchestrator: exports_external.enum(["primary", "delegate"]).optional(),
       testerReviewer: exports_external.enum(["primary", "delegate"]).optional()
     }).optional()
   });
+  SkillsRegistrySchema = exports_external.object({
+    version: exports_external.literal(1),
+    skills: exports_external.record(exports_external.string().min(1).regex(/^[a-z0-9\-]+$/), exports_external.object({
+      version: exports_external.string().min(1)
+    }))
+  });
 });
 
 // src/core/ccep/profiles.ts
@@ -13342,6 +13430,8 @@ function resolveAssets(target) {
       return ["AGENTS.md", ".cursorignore", "rules", "commands", "skills", "agents", "prompts/v1.0.0"];
     case "agy":
       return ["AGENTS.md", "rules", "workflows", "skills", "prompts/v1.0.0"];
+    case "pi":
+      return ["AGENTS.md", "settings.json", "prompts", "skills", "agents", "prompts/v1.0.0"];
   }
 }
 var CURRENT_PRESET_VERSION = "v1.0.0";
@@ -13691,6 +13781,9 @@ var init_detect_command = __esm(() => {
 });
 
 // src/core/lsp/lsp-config-utils.ts
+function filterSuccessfulLsps(installedLsps) {
+  return installedLsps.filter((lsp) => lsp.status !== "failed");
+}
 function getLanguageServerConfig(lspIds) {
   const languageServers = {};
   for (const lspId of lspIds) {
@@ -13721,7 +13814,7 @@ class AgyLspGenerator {
   name = "agy-lsp";
   target = "agy";
   generate(installedLsps) {
-    const successfulLsps = installedLsps.filter((lsp) => lsp.status !== "failed");
+    const successfulLsps = filterSuccessfulLsps(installedLsps);
     if (successfulLsps.length === 0) {
       return [];
     }
@@ -13764,7 +13857,7 @@ class ClaudeLspGenerator {
   name = "claude-lsp";
   target = "claude";
   generate(installedLsps) {
-    const successfulLsps = installedLsps.filter((lsp) => lsp.status !== "failed");
+    const successfulLsps = filterSuccessfulLsps(installedLsps);
     if (successfulLsps.length === 0) {
       return [];
     }
@@ -13792,7 +13885,7 @@ class CodexLspGenerator {
   name = "codex-lsp";
   target = "codex";
   generate(installedLsps) {
-    const successfulLsps = installedLsps.filter((lsp) => lsp.status !== "failed");
+    const successfulLsps = filterSuccessfulLsps(installedLsps);
     if (successfulLsps.length === 0) {
       return [];
     }
@@ -13831,7 +13924,7 @@ class CursorLspGenerator {
   name = "cursor-lsp";
   target = "cursor";
   generate(installedLsps) {
-    const successfulLsps = installedLsps.filter((lsp) => lsp.status !== "failed");
+    const successfulLsps = filterSuccessfulLsps(installedLsps);
     if (successfulLsps.length === 0) {
       return [];
     }
@@ -13861,7 +13954,7 @@ class GeminiLspGenerator {
   name = "gemini-lsp";
   target = "gemini";
   generate(installedLsps) {
-    const successfulLsps = installedLsps.filter((lsp) => lsp.status !== "failed");
+    const successfulLsps = filterSuccessfulLsps(installedLsps);
     if (successfulLsps.length === 0) {
       return [];
     }
@@ -13891,7 +13984,7 @@ class OpenCodeLspGenerator {
   name = "opencode-lsp";
   target = "opencode";
   generate(installedLsps) {
-    const successfulLsps = installedLsps.filter((lsp2) => lsp2.status !== "failed");
+    const successfulLsps = filterSuccessfulLsps(installedLsps);
     if (successfulLsps.length === 0) {
       return [];
     }
@@ -15214,28 +15307,6 @@ var init_lsp_registry = __esm(() => {
   }
 });
 
-// src/core/runner/runner-target.ts
-function isRunnerTarget(value) {
-  return RUNNER_TARGETS.includes(value);
-}
-function parseRunnerTarget(value) {
-  if (!isRunnerTarget(value)) {
-    throw new Error(`Invalid runner target: ${value}. Valid targets: ${RUNNER_TARGETS.join(", ")}`);
-  }
-  return value;
-}
-function getIndividualTargets(target) {
-  if (target === "all") {
-    return [...INDIVIDUAL_TARGETS];
-  }
-  return [target];
-}
-var RUNNER_TARGETS, INDIVIDUAL_TARGETS;
-var init_runner_target = __esm(() => {
-  RUNNER_TARGETS = ["opencode", "claude", "codex", "gemini", "cursor", "agy", "all"];
-  INDIVIDUAL_TARGETS = ["opencode", "claude", "codex", "gemini", "cursor", "agy"];
-});
-
 // src/commands/install-lsp.command.ts
 var exports_install_lsp_command = {};
 __export(exports_install_lsp_command, {
@@ -15403,56 +15474,39 @@ var init_install_lsp_command = __esm(() => {
 });
 
 // src/domain/council/council-agent.ts
-function getResponsibilities(agentId) {
-  const responsibilities = {
-    architect: `- Analyze code architecture
-- Suggest design patterns
-- Review code structure
-- Propose refactoring`,
-    security: `- Identify security vulnerabilities
-- Review for OWASP risks
-- Check compliance requirements
-- Suggest security improvements`,
-    product: `- Understand requirements
-- Evaluate UX decisions
-- Assess business value
-- Prioritize features`,
-    delivery: `- Review test coverage
-- Assess deployment readiness
-- Evaluate code quality
-- Suggest improvements`,
-    "data-ops": `- Review data pipelines
-- Assess analytics implementation
-- Check data quality
-- Suggest improvements`,
-    devil: `- Challenge assumptions
-- Find edge cases
-- Identify failure modes
-- Stress test solutions`,
-    "seo-auditor": `- Audit technical SEO
-- Check meta tags and headings
-- Validate crawl directives
-- Assess page speed signals`,
-    "schema-validator": `- Validate Schema.org markup
-- Check JSON-LD syntax
-- Verify required properties
-- Suggest structured data fixes`,
-    "geo-specialist": `- Assess AI-search readiness
-- Validate llms.txt
-- Check citable content
-- Review GEO optimization`,
-    "content-strategist": `- Plan content marketing
-- Guide off-page SEO
-- Suggest backlink strategy
-- Review hotel copywriting`,
-    "astro-specialist": `- Validate Astro SEO patterns
-- Check static generation
-- Review Islands Architecture
-- Optimize image handling`
-  };
-  return responsibilities[agentId] || "- Provide critical review";
+function yamlString(value) {
+  return JSON.stringify(value);
+}
+function generatePermissionBlock(context) {
+  if (context === "repo-readonly") {
+    return `  read: allow
+  edit: deny
+  bash: deny
+  glob: allow
+  grep: allow
+  webfetch: deny
+  websearch: deny`;
+  }
+  return `  read: deny
+  edit: deny
+  bash: deny
+  glob: deny
+  grep: deny
+  webfetch: deny
+  websearch: deny`;
+}
+function profileFor(agentId) {
+  return ROLE_PROFILES[agentId] ?? DEFAULT_PROFILE;
+}
+function checklistFor(agentId) {
+  return profileFor(agentId).checklist;
 }
 function generateAgentContent(agent) {
+  const profile = profileFor(agent.id);
+  const vetoSection = profile.vetoNote ? `
+## Veto
+${profile.vetoNote}
+` : "";
   return `# ${agent.role} Agent
 
 ## Role
@@ -15469,9 +15523,172 @@ ${agent.focus.map((f) => `- ${f}`).join(`
 `)}
 
 ## Responsibilities
-${getResponsibilities(agent.id)}
+${profile.responsibilities.map((r) => `- ${r}`).join(`
+`)}
+
+## Review Checklist
+${profile.checklist.map((c) => `- ${c}`).join(`
+`)}
+${vetoSection}
+## Finding Format
+- **CRITICAL** — blocks the council verdict; must be resolved before merge.
+- **WARNING** — should be resolved before merge; does not block.
+- **SUGGESTION** — optional improvement, non-blocking.
 `;
 }
+var ROLE_PROFILES, DEFAULT_PROFILE;
+var init_council_agent = __esm(() => {
+  ROLE_PROFILES = {
+    architect: {
+      responsibilities: [
+        "Analyze code architecture",
+        "Suggest design patterns",
+        "Review code structure",
+        "Propose refactoring"
+      ],
+      checklist: [
+        "Does the diff follow existing module boundaries and naming conventions?",
+        "Are there speculative abstractions not required by the current task?",
+        "Does it introduce hidden coupling between previously independent modules?",
+        "Is the chosen approach the simplest one that satisfies the requirement?"
+      ]
+    },
+    "security-reviewer": {
+      responsibilities: [
+        "Identify security vulnerabilities",
+        "Review for OWASP Top 10 risks",
+        "Check compliance requirements",
+        "Flag credential, injection, auth, and supply-chain issues"
+      ],
+      checklist: [
+        "Injection vectors: SQL, command, template, LDAP?",
+        "Auth: bypass, session fixation, privilege escalation?",
+        "Credentials: hardcoded secrets, tokens in logs, insecure storage?",
+        "Supply chain: untrusted or unpinned dependencies?",
+        "Data exposure: PII in logs, internals leaking through error messages?"
+      ],
+      vetoNote: "Any CRITICAL finding here sets `securityVeto: true` — it overrides majority consensus."
+    },
+    product: {
+      responsibilities: [
+        "Understand requirements",
+        "Evaluate UX decisions",
+        "Assess business value",
+        "Prioritize features"
+      ],
+      checklist: [
+        "Does the change satisfy the stated requirement and acceptance criteria?",
+        "Is there a user-facing regression or an unclear interaction?",
+        "Is the scope proportional to the business value, not gold-plated?"
+      ]
+    },
+    delivery: {
+      responsibilities: [
+        "Review test coverage",
+        "Assess deployment readiness",
+        "Evaluate code quality",
+        "Suggest improvements"
+      ],
+      checklist: [
+        "Is test coverage adequate for happy path, edge cases, and error cases?",
+        "Can this ship without a manual follow-up step?",
+        "Is there a rollback path or observability for this change?"
+      ]
+    },
+    "data-ops": {
+      responsibilities: [
+        "Review data pipelines",
+        "Assess analytics implementation",
+        "Check data quality",
+        "Suggest improvements"
+      ],
+      checklist: [
+        "Does the change affect schemas, migrations, or pipelines safely?",
+        "Is any analytics or tracking impact documented?",
+        "Is backward compatibility preserved for existing data consumers?"
+      ]
+    },
+    devil: {
+      responsibilities: [
+        "Challenge assumptions",
+        "Find edge cases",
+        "Identify failure modes",
+        "Stress test solutions"
+      ],
+      checklist: [
+        "Assumption: what is being assumed that has not been verified?",
+        "Failure mode: how does this break under load, edge cases, or partial failure?",
+        "Scope: what is being pulled in that the objective does not require?",
+        "Simpler path: was a materially simpler approach dismissed too fast?",
+        "Reversibility: if this is wrong, how expensive is it to undo?"
+      ]
+    },
+    "seo-auditor": {
+      responsibilities: [
+        "Audit technical SEO",
+        "Check meta tags and headings",
+        "Validate crawl directives",
+        "Assess page speed signals"
+      ],
+      checklist: [
+        "Are meta tags, headings, and crawl directives correct?",
+        "Does the page speed profile regress Core Web Vitals?"
+      ]
+    },
+    "schema-validator": {
+      responsibilities: [
+        "Validate Schema.org markup",
+        "Check JSON-LD syntax",
+        "Verify required properties",
+        "Suggest structured data fixes"
+      ],
+      checklist: [
+        "Is the JSON-LD syntactically valid and schema.org-compliant?",
+        "Are all required properties for the markup type present?"
+      ]
+    },
+    "geo-specialist": {
+      responsibilities: [
+        "Assess AI-search readiness",
+        "Validate llms.txt",
+        "Check citable content",
+        "Review GEO optimization"
+      ],
+      checklist: [
+        "Is content structured for passage-level citability?",
+        "Does llms.txt accurately describe crawl permissions?"
+      ]
+    },
+    "content-strategist": {
+      responsibilities: [
+        "Plan content marketing",
+        "Guide off-page SEO",
+        "Suggest backlink strategy",
+        "Review hotel copywriting"
+      ],
+      checklist: [
+        "Does the content plan align with the target audience and intent?",
+        "Is the backlink strategy realistic and policy-compliant?"
+      ]
+    },
+    "astro-specialist": {
+      responsibilities: [
+        "Validate Astro SEO patterns",
+        "Check static generation",
+        "Review Islands Architecture",
+        "Optimize image handling"
+      ],
+      checklist: [
+        "Are pages statically generated where possible?",
+        "Is client-side hydration limited to interactive islands?"
+      ]
+    }
+  };
+  DEFAULT_PROFILE = {
+    responsibilities: ["Provide critical review"],
+    checklist: ["Does the change satisfy this role’s stated focus areas?"]
+  };
+});
 
 // src/adapters/agy/agy-council-generator.ts
 function generateAgyFiles(spec) {
@@ -15530,24 +15747,6 @@ ${generatePermissionBlock(agent.context)}
 
 ${generateAgentContent(agent)}`;
 }
-function generatePermissionBlock(context) {
-  if (context === "repo-readonly") {
-    return `  read: allow
-  edit: deny
-  bash: deny
-  glob: allow
-  grep: allow
-  webfetch: deny
-  websearch: deny`;
-  }
-  return `  read: deny
-  edit: deny
-  bash: deny
-  glob: deny
-  grep: deny
-  webfetch: deny
-  websearch: deny`;
-}
 function generateCouncilWorkflow(spec) {
   return `---
 name: cc-council
@@ -15615,10 +15814,9 @@ If APPROVED (no CRITICAL findings):
 Deliver the complete Council Verdict. The feature is only complete when tests pass and the council explicitly approves the implementation according to the specification.
 `;
 }
-function yamlString(value) {
-  return JSON.stringify(value);
-}
-var init_agy_council_generator = () => {};
+var init_agy_council_generator = __esm(() => {
+  init_council_agent();
+});
 
 // src/adapters/agy/agy-installer.ts
 var exports_agy_installer = {};
@@ -15676,7 +15874,12 @@ function generateClaudeFiles(spec) {
   return files;
 }
 function generateCouncilSkill2(spec) {
-  return `# Council Skill
+  return `---
+name: council
+description: ${yamlString(spec.description)}
+---
+
+# Council Skill
 
 ## Description
 ${spec.description}
@@ -15697,7 +15900,7 @@ ${spec.outputContract}
 }
 function generateCouncilCommand(spec) {
   return `---
-description: ${yamlString2(spec.description)}
+description: ${yamlString(spec.description)}
 ---
 
 # Council-Driven Workflow
@@ -15761,10 +15964,9 @@ If APPROVED (no CRITICAL findings):
 Deliver the complete Council Verdict. The feature is only complete when tests pass and the council explicitly approves the implementation according to the specification.
 `;
 }
-function yamlString2(value) {
-  return JSON.stringify(value);
-}
-var init_claude_council_generator = () => {};
+var init_claude_council_generator = __esm(() => {
+  init_council_agent();
+});
 
 // src/adapters/claude/claude-installer.ts
 var exports_claude_installer = {};
@@ -15840,16 +16042,17 @@ ${agentTables}
 }
 function generateCodexAgent(agent) {
   const focusAreas = agent.focus.join(", ");
+  const checklist = checklistFor(agent.id).join("; ");
   return `name = "${agent.role}"
 description = "${agent.role} council agent. Focus: ${focusAreas}. Context: ${agent.context}. Model hint: ${agent.modelHint}."
 nickname_candidates = ["${agent.role}", "Council ${agent.role}"]
-developer_instructions = "You are the ${agent.role} council agent. Your focus areas are: ${focusAreas}. Context: ${agent.context}. Apply ${agent.modelHint} reasoning to your analysis."
+developer_instructions = "You are the ${agent.role} council agent. Your focus areas are: ${focusAreas}. Context: ${agent.context}. Apply ${agent.modelHint} reasoning to your analysis. Review checklist: ${checklist}. Categorize findings as CRITICAL (blocks the verdict), WARNING, or SUGGESTION."
 `;
 }
 function generateCodexSkill(spec) {
   return `---
 name: council
-description: ${spec.description}
+description: ${yamlString(spec.description)}
 version: ${spec.version}
 ---
 
@@ -15861,6 +16064,9 @@ ${spec.agents.map((a) => `- **${a.role}** (${a.id}): ${a.focus.join(", ")}`).joi
 Use the council agents to get multi-perspective analysis on code changes, architecture decisions, and security reviews.
 `;
 }
+var init_codex_council_generator = __esm(() => {
+  init_council_agent();
+});
 
 // src/adapters/codex/codex-installer.ts
 var exports_codex_installer = {};
@@ -15891,115 +16097,367 @@ function createCodexInstaller(spec) {
   installer.setSpec(spec);
   return installer;
 }
-var init_codex_installer = () => {};
+var init_codex_installer = __esm(() => {
+  init_codex_council_generator();
+});
 
-// src/adapters/opencode/opencode-council-generator.ts
-function generateOpenCodeFiles(spec) {
+// src/adapters/cursor/cursor-council-generator.ts
+function generateCursorFiles(spec) {
   const files = [];
   files.push({
-    path: ".opencode/commands/cc-council.md",
-    content: generateCouncilCommand2(spec),
-    overwrite: false
-  });
-  files.push({
-    path: ".opencode/agents/council-lead.md",
-    content: generateCouncilLead(spec),
+    path: ".cursor/skills/council/SKILL.md",
+    content: generateCouncilSkill3(spec),
     overwrite: false
   });
   for (const agent of spec.agents) {
     files.push({
-      path: `.opencode/agents/council-${agent.id}.md`,
-      content: generateOpenCodeAgentContent(agent),
+      path: `.cursor/agents/council-${agent.id}.md`,
+      content: generateAgentContent(agent),
       overwrite: false
     });
   }
+  files.push({
+    path: ".cursor/commands/cc/council.md",
+    content: generateCouncilCommand2(spec),
+    overwrite: false
+  });
   return files;
 }
-function generateCouncilCommand2(spec) {
+function generateCouncilSkill3(spec) {
   return `---
-description: ${yamlString3(spec.description)}
-agent: council-lead
-subtask: true
+name: council
+description: ${yamlString(spec.description)}
 ---
 
-Run the CodeConductor council for multi-perspective analysis.
+# Council Skill
+
+## Description
+${spec.description}
 
 ## Version
 ${spec.version}
 
 ## Agents
-${spec.agents.map((a) => `- ${a.role} (${a.id})`).join(`
+${spec.agents.map((a) => `- **${a.role}** (${a.id}): ${a.focus.join(", ")}`).join(`
 `)}
 
-## Instructions
-Coordinate with the council agents and synthesize their perspectives into the configured output contract.
+## Usage
+Use the council agents to get multi-perspective analysis on code changes, architecture decisions, and security reviews.
+
+## Context
+${spec.outputContract}
 `;
 }
-function generateCouncilLead(spec) {
+function generateCouncilCommand2(spec) {
   return `---
-description: ${yamlString3(`${spec.description} Council lead. Coordinates council members and synthesizes recommendations.`)}
-mode: subagent
-permission:
-  read: allow
-  edit: deny
-  bash: deny
-  glob: allow
-  grep: allow
-  webfetch: deny
-  websearch: deny
+description: ${yamlString(spec.description)}
 ---
 
-# Council Lead Agent
+# Council-Driven Workflow
 
-## Role
-Coordinates the council and synthesizes perspectives
+Task request: $ARGUMENTS
 
-## Version
-${spec.version}
+## Step 1 — Deliberation & Specification (SDD)
 
-## Council Members
-${spec.agents.map((a) => `- ${a.role}: ${a.focus.join(", ")}`).join(`
-`)}
+Invoke the \`council\` skill to analyze the request before writing any code. The council must act as a steering committee involving \`task-coach\` (Product), \`architect\`, and \`devil\`.
+
+The council must:
+1. Clarify the prompt and define the absolute minimum scope (Simplicity Gate).
+2. Explicitly document all assumptions and resolve ambiguities (Think Before Coding).
+3. Draft a Task Card & Technical Plan (The Specification).
+
+**STOP here. Show the agreed Task Card & Technical Plan and wait for human confirmation before continuing.**
 
-## Responsibilities
-- Coordinate agent responses
-- Synthesize different perspectives
-- Identify consensus and disagreements
-- Provide final recommendation
-`;
-}
-function generateOpenCodeAgentContent(agent) {
-  return `---
-description: ${yamlString3(`${agent.role} council agent. Focus: ${agent.focus.join(", ")}. Context: ${agent.context}. Model hint: ${agent.modelHint}.`)}
-mode: subagent
-permission:
-${generatePermissionBlock2(agent.context)}
 ---
 
-${generateAgentContent(agent)}`;
-}
-function generatePermissionBlock2(context) {
-  if (context === "repo-readonly") {
-    return `  read: allow
-  edit: deny
-  bash: deny
-  glob: allow
-  grep: allow
-  webfetch: deny
-  websearch: deny`;
-  }
-  return `  read: deny
-  edit: deny
-  bash: deny
-  glob: deny
-  grep: deny
+## Step 2 — Test Definition (TDD)
+
+Invoke \`tester\` with the approved Task Card & Technical Plan.
+
+tester must:
+1. Write failing tests based on the Acceptance Criteria defined in the Task Card.
+2. Confirm the tests fail as expected (Red state).
+
+**Goal-Driven Execution (Karpathy)**: Do not proceed until verifiable tests are written and fail for the correct reasons.
+
+---
+
+## Step 3 — Surgical Implementation
+
+Invoke \`implementer\` with the failing tests and the Technical Plan.
+
+implementer must:
+1. Write the minimal code required to pass the tests.
+2. Touch ONLY the files specified in the Technical Plan (Surgical Changes).
+3. NOT refactor adjacent code, change existing styles, or build speculative features.
+4. Run the tests. Loop \`implementer\` -> \`tester\` until all tests pass (Green state).
+
+---
+
+## Step 4 — Multi-Perspective Council Review
+
+Invoke the \`council\` skill on the generated diff to perform the final review phase.
+
+The council will evaluate the diff against the roster's axes (Architecture, Security, Product, Delivery, DataOps, Devil).
+
+If ANY agent votes CRITICAL (especially due to over-engineering, scope creep, or missing the verifiable goals):
+- The Review Report status is **BLOCKED**.
+- Return to Step 3 with the feedback.
+
+If APPROVED (no CRITICAL findings):
+- Deliver the final Council Verdict and the diff summary.
+
+---
+
+## Completion
+
+Deliver the complete Council Verdict. The feature is only complete when tests pass and the council explicitly approves the implementation according to the specification.
+`;
+}
+var init_cursor_council_generator = __esm(() => {
+  init_council_agent();
+});
+
+// src/adapters/cursor/cursor-installer.ts
+class CursorInstaller {
+  name = "cursor";
+  target = "cursor";
+  spec = null;
+  setSpec(spec) {
+    this.spec = spec;
+  }
+  async generate() {
+    if (!this.spec) {
+      throw new Error("Council spec not set");
+    }
+    return generateCursorFiles(this.spec);
+  }
+  async isAvailable() {
+    return true;
+  }
+}
+function createCursorInstaller(spec) {
+  const installer = new CursorInstaller;
+  installer.setSpec(spec);
+  return installer;
+}
+var init_cursor_installer = __esm(() => {
+  init_cursor_council_generator();
+});
+
+// src/adapters/gemini/gemini-council-generator.ts
+function generateGeminiFiles(spec) {
+  const files = [];
+  files.push({
+    path: ".gemini/skills/council/SKILL.md",
+    content: generateCouncilSkill4(spec),
+    overwrite: false
+  });
+  for (const agent of spec.agents) {
+    files.push({
+      path: `.gemini/agents/council-${agent.id}.md`,
+      content: generateAgentContent(agent),
+      overwrite: false
+    });
+  }
+  files.push({
+    path: ".gemini/commands/cc/council.toml",
+    content: generateCouncilToml(spec),
+    overwrite: false
+  });
+  return files;
+}
+function generateCouncilSkill4(spec) {
+  return `---
+name: council
+description: ${yamlString(spec.description)}
+---
+
+# Council Skill
+
+## Version
+${spec.version}
+
+## Agents
+${spec.agents.map((a) => `- ${a.role} (${a.id}): ${a.focus.join(", ")}`).join(`
+`)}
+
+## Usage
+Use the council agents to get multi-perspective analysis on code changes, architecture decisions, and security reviews.
+
+## Instructions
+Coordinate with the council agents and synthesize their perspectives into the configured output contract.
+
+## Context
+${spec.outputContract}
+`;
+}
+function generateCouncilToml(spec) {
+  const prompt = tomlEscapePrompt(`## Step 1 — Deliberation & Specification (SDD)
+
+Invoke the council skill to analyze the request before writing any code. The council must act as a steering committee involving task-coach (Product), architect, and devil.
+
+The council must:
+1. Clarify the prompt and define the absolute minimum scope (Simplicity Gate).
+2. Explicitly document all assumptions and resolve ambiguities (Think Before Coding).
+3. Draft a Task Card & Technical Plan (The Specification).
+
+STOP here. Show the agreed Task Card & Technical Plan and wait for human confirmation before continuing.
+
+---
+
+## Step 2 — Test Definition (TDD)
+
+Invoke tester with the approved Task Card & Technical Plan. Write failing tests based on the Acceptance Criteria, then confirm they fail (Red state).
+
+---
+
+## Step 3 — Surgical Implementation
+
+Invoke implementer with the failing tests and the Technical Plan. Write the minimal code required to pass the tests, touching ONLY the files specified in the Technical Plan. Loop implementer -> tester until all tests pass (Green state).
+
+---
+
+## Step 4 — Multi-Perspective Council Review
+
+Invoke the council skill on the generated diff. If ANY agent votes CRITICAL, the Review Report status is BLOCKED and work returns to Step 3. If APPROVED (no CRITICAL findings), deliver the final Council Verdict and the diff summary.
+
+---
+
+## Completion
+
+Deliver the complete Council Verdict. The feature is only complete when tests pass and the council explicitly approves the implementation.
+
+Task request: {{args}}`);
+  return `description = ${JSON.stringify(spec.description)}
+
+prompt = """
+${prompt}
+"""
+`;
+}
+function tomlEscapePrompt(prompt) {
+  return prompt.replace(/\\/g, "\\\\").replace(/"""/g, "'''");
+}
+var init_gemini_council_generator = __esm(() => {
+  init_council_agent();
+});
+
+// src/adapters/gemini/gemini-installer.ts
+class GeminiInstaller {
+  name = "gemini";
+  target = "gemini";
+  spec = null;
+  setSpec(spec) {
+    this.spec = spec;
+  }
+  async generate() {
+    if (!this.spec) {
+      throw new Error("Council spec not set");
+    }
+    return generateGeminiFiles(this.spec);
+  }
+  async isAvailable() {
+    return true;
+  }
+}
+function createGeminiInstaller(spec) {
+  const installer = new GeminiInstaller;
+  installer.setSpec(spec);
+  return installer;
+}
+var init_gemini_installer = __esm(() => {
+  init_gemini_council_generator();
+});
+
+// src/adapters/opencode/opencode-council-generator.ts
+function generateOpenCodeFiles(spec) {
+  const files = [];
+  files.push({
+    path: ".opencode/commands/cc-council.md",
+    content: generateCouncilCommand3(spec),
+    overwrite: false
+  });
+  files.push({
+    path: ".opencode/agents/council-lead.md",
+    content: generateCouncilLead(spec),
+    overwrite: false
+  });
+  for (const agent of spec.agents) {
+    files.push({
+      path: `.opencode/agents/council-${agent.id}.md`,
+      content: generateOpenCodeAgentContent(agent),
+      overwrite: false
+    });
+  }
+  return files;
+}
+function generateCouncilCommand3(spec) {
+  return `---
+description: ${yamlString(spec.description)}
+agent: council-lead
+subtask: true
+---
+
+Run the CodeConductor council for multi-perspective analysis.
+
+## Version
+${spec.version}
+
+## Agents
+${spec.agents.map((a) => `- ${a.role} (${a.id})`).join(`
+`)}
+
+## Instructions
+Coordinate with the council agents and synthesize their perspectives into the configured output contract.
+`;
+}
+function generateCouncilLead(spec) {
+  return `---
+description: ${yamlString(`${spec.description} Council lead. Coordinates council members and synthesizes recommendations.`)}
+mode: subagent
+permission:
+  read: allow
+  edit: deny
+  bash: deny
+  glob: allow
+  grep: allow
   webfetch: deny
-  websearch: deny`;
+  websearch: deny
+---
+
+# Council Lead Agent
+
+## Role
+Coordinates the council and synthesizes perspectives
+
+## Version
+${spec.version}
+
+## Council Members
+${spec.agents.map((a) => `- ${a.role}: ${a.focus.join(", ")}`).join(`
+`)}
+
+## Responsibilities
+- Coordinate agent responses
+- Synthesize different perspectives
+- Identify consensus and disagreements
+- Provide final recommendation
+`;
 }
-function yamlString3(value) {
-  return JSON.stringify(value);
+function generateOpenCodeAgentContent(agent) {
+  return `---
+description: ${yamlString(`${agent.role} council agent. Focus: ${agent.focus.join(", ")}. Context: ${agent.context}. Model hint: ${agent.modelHint}.`)}
+mode: subagent
+permission:
+${generatePermissionBlock(agent.context)}
+---
+
+${generateAgentContent(agent)}`;
 }
-var init_opencode_council_generator = () => {};
+var init_opencode_council_generator = __esm(() => {
+  init_council_agent();
+});
 
 // src/adapters/opencode/opencode-installer.ts
 var exports_opencode_installer = {};
@@ -16034,6 +16492,150 @@ var init_opencode_installer = __esm(() => {
   init_opencode_council_generator();
 });
 
+// src/adapters/pi/pi-council-generator.ts
+function generatePiFiles(spec) {
+  const files = [];
+  files.push({
+    path: ".agents/skills/council/SKILL.md",
+    content: generateCouncilSkill5(spec),
+    overwrite: false
+  });
+  for (const agent of spec.agents) {
+    files.push({
+      path: `.agents/agents/council-${agent.id}.md`,
+      content: generateAgentContent(agent),
+      overwrite: false
+    });
+  }
+  files.push({
+    path: ".pi/prompts/cc-council.md",
+    content: generateCouncilWorkflow2(spec),
+    overwrite: false
+  });
+  return files;
+}
+function generateCouncilSkill5(spec) {
+  return `---
+name: council
+description: ${yamlString(spec.description)}
+---
+
+# Council Skill
+
+## Version
+${spec.version}
+
+## Agents
+${spec.agents.map((a) => `- ${a.role} (${a.id}): ${a.focus.join(", ")}`).join(`
+`)}
+
+## Usage
+Use the council agents to get multi-perspective analysis on code changes, architecture decisions, and security reviews.
+
+## Instructions
+Coordinate with the council agents and synthesize their perspectives into the configured output contract.
+
+## Context
+${spec.outputContract}
+`;
+}
+function generateCouncilWorkflow2(spec) {
+  return `---
+description: ${yamlString(spec.description)}
+---
+
+# Council-Driven Workflow
+
+Task request: $ARGUMENTS
+
+## Step 1 — Deliberation & Specification (SDD)
+
+Invoke the \`council\` skill to analyze the request before writing any code. The council must act as a steering committee involving \`task-coach\` (Product), \`architect\`, and \`devil\`.
+
+The council must:
+1. Clarify the prompt and define the absolute minimum scope (Simplicity Gate).
+2. Explicitly document all assumptions and resolve ambiguities (Think Before Coding).
+3. Draft a Task Card & Technical Plan (The Specification).
+
+**STOP here. Show the agreed Task Card & Technical Plan and wait for human confirmation before continuing.**
+
+---
+
+## Step 2 — Test Definition (TDD)
+
+Invoke \`tester\` with the approved Task Card & Technical Plan.
+
+tester must:
+1. Write failing tests based on the Acceptance Criteria defined in the Task Card.
+2. Confirm the tests fail as expected (Red state).
+
+**Goal-Driven Execution (Karpathy)**: Do not proceed until verifiable tests are written and fail for the correct reasons.
+
+---
+
+## Step 3 — Surgical Implementation
+
+Invoke \`implementer\` with the failing tests and the Technical Plan.
+
+implementer must:
+1. Write the minimal code required to pass the tests.
+2. Touch ONLY the files specified in the Technical Plan (Surgical Changes).
+3. NOT refactor adjacent code, change existing styles, or build speculative features.
+4. Run the tests. Loop \`implementer\` -> \`tester\` until all tests pass (Green state).
+
+---
+
+## Step 4 — Multi-Perspective Council Review
+
+Invoke the \`council\` skill on the generated diff to perform the final review phase.
+
+The council will evaluate the diff against the roster's axes (Architecture, Security, Product, Delivery, DataOps, Devil).
+
+If ANY agent votes CRITICAL (especially due to over-engineering, scope creep, or missing the verifiable goals):
+- The Review Report status is **BLOCKED**.
+- Return to Step 3 with the feedback.
+
+If APPROVED (no CRITICAL findings):
+- Deliver the final Council Verdict and the diff summary.
+
+---
+
+## Completion
+
+Deliver the complete Council Verdict. The feature is only complete when tests pass and the council explicitly approves the implementation according to the specification.
+`;
+}
+var init_pi_council_generator = __esm(() => {
+  init_council_agent();
+});
+
+// src/adapters/pi/pi-installer.ts
+class PiInstaller {
+  name = "pi";
+  target = "pi";
+  spec = null;
+  setSpec(spec) {
+    this.spec = spec;
+  }
+  async generate() {
+    if (!this.spec) {
+      throw new Error("Council spec not set");
+    }
+    return generatePiFiles(this.spec);
+  }
+  async isAvailable() {
+    return true;
+  }
+}
+function createPiInstaller(spec) {
+  const installer = new PiInstaller;
+  installer.setSpec(spec);
+  return installer;
+}
+var init_pi_installer = __esm(() => {
+  init_pi_council_generator();
+});
+
 // src/core/i18n/language-instructions.ts
 function getLanguageInstruction(locale) {
   const key = SUPPORTED_LOCALES.includes(locale) ? locale : "en";
@@ -16268,6 +16870,13 @@ async function fileExists4(path) {
     return false;
   }
 }
+function resolveAgyGlobalEntry(entry, homeDir) {
+  const isAntigravityCliSettings = entry.dest.startsWith("antigravity-cli/");
+  return {
+    baseDir: join6(homeDir, ".gemini", ...isAntigravityCliSettings ? [] : ["config"]),
+    entry: isAntigravityCliSettings ? entry : { ...entry, dest: entry.dest.replace(/^\.agents\/?/, "") }
+  };
+}
 async function resolveEntryFiles(entry, presetsDir, baseDir) {
   const srcAbsolute = resolve10(presetsDir, entry.src);
   try {
@@ -16440,15 +17049,14 @@ function substituteToolNames(content, modelConfig) {
   if (!modelConfig.tools && !modelConfig.permissions)
     return content;
   const target = modelConfig.target;
-  const fmMatch = content.match(/^---\r?\n([\s\S]*?)\r?\n---/);
+  const fmMatch = content.match(/^---(\r?\n)([\s\S]*?)\r?\n---/);
   if (!fmMatch)
     return content;
-  const frontmatter = fmMatch[1];
+  const eol = fmMatch[1];
+  const frontmatter = fmMatch[2];
   if (target === "opencode" && modelConfig.permissions) {
     const updatedFrontmatter2 = frontmatter.replace(/^tools:\s*(.+)\r?\n?/m, "");
-    return content.replace(fmMatch[0], `---
-${updatedFrontmatter2}
----`);
+    return content.replace(fmMatch[0], `---${eol}${updatedFrontmatter2}${eol}---`);
   }
   if (!modelConfig.tools)
     return content;
@@ -16463,9 +17071,7 @@ ${updatedFrontmatter2}
     });
     return `tools: ${mappedNames.join(", ")}`;
   });
-  return content.replace(fmMatch[0], `---
-${updatedFrontmatter}
----`);
+  return content.replace(fmMatch[0], `---${eol}${updatedFrontmatter}${eol}---`);
 }
 function injectMcpServers(jsonString, filePath) {
   const isAgyMcpConfig = filePath.endsWith("mcp_config.json");
@@ -16625,11 +17231,9 @@ async function copyFromManifest(manifest, presetsDir, baseDir, isGlobal, dryRun,
     let resolvedBaseDir = baseDir;
     let resolvedEntry = entry;
     if (manifest.target === "agy" && isGlobal) {
-      resolvedBaseDir = join6(homedir6(), ".gemini", "config");
-      resolvedEntry = {
-        ...entry,
-        dest: entry.dest.replace(/^\.agents\/?/, "")
-      };
+      const resolved = resolveAgyGlobalEntry(entry, homedir6());
+      resolvedBaseDir = resolved.baseDir;
+      resolvedEntry = resolved.entry;
     }
     const files = await resolveEntryFiles(resolvedEntry, presetsDir, resolvedBaseDir);
     const isTemplate = entry.template === true;
@@ -16666,18 +17270,31 @@ async function loadManifest(target) {
   return InstallManifestSchema.parse(data);
 }
 async function loadModelConfig(target) {
-  const modelPath = join7(MODELS_DIR, `${target}.yml`);
-  const content = await readFile6(modelPath, "utf-8");
-  const data = $parse(content);
-  return ModelConfigSchema.parse(data);
+  const [rolesRaw, targetRaw] = await Promise.all([
+    readFile6(join7(MODELS_DIR, "roles.yml"), "utf-8"),
+    readFile6(join7(MODELS_DIR, `${target}.yml`), "utf-8")
+  ]);
+  const roles = $parse(rolesRaw);
+  const targetData = $parse(targetRaw);
+  return ModelConfigSchema.parse({
+    target: targetData.target,
+    agents: roles.agents,
+    tools: targetData.permissions ? undefined : roles.tools,
+    permissions: targetData.permissions
+  });
+}
+async function loadTargetCapabilities(target) {
+  const content = await readFile6(join7(TARGETS_DIR, `${target}.yml`), "utf-8");
+  return TargetCapabilitiesSchema.parse($parse(content));
 }
-var MANIFESTS_DIR, MODELS_DIR, PRESETS_DIR;
+var MANIFESTS_DIR, MODELS_DIR, TARGETS_DIR, PRESETS_DIR;
 var init_manifest_loader = __esm(() => {
   init_dist();
   init_schemas();
   init_package_paths();
   MANIFESTS_DIR = join7(SRC_PRESETS_DIR, "manifests");
   MODELS_DIR = join7(SRC_PRESETS_DIR, "models");
+  TARGETS_DIR = join7(SRC_PRESETS_DIR, "targets");
   PRESETS_DIR = ROOT_PRESETS_DIR;
 });
 
@@ -16724,14 +17341,55 @@ var init_preset_loader = __esm(() => {
   init_package_paths();
 });
 
+// src/core/presets/skill-frontmatter.ts
+function parseFrontmatterFence(content) {
+  const fmMatch = content.match(/^---\r?\n([\s\S]*?)\r?\n---/);
+  if (!fmMatch) {
+    return { ok: false, error: { kind: "missing", message: "No YAML frontmatter fence found" } };
+  }
+  try {
+    return { ok: true, data: $parse(fmMatch[1]) };
+  } catch (e) {
+    return {
+      ok: false,
+      error: { kind: "invalid-yaml", message: e instanceof Error ? e.message : String(e) }
+    };
+  }
+}
+function parseSkillFrontmatter(content) {
+  const fence = parseFrontmatterFence(content);
+  if (!fence.ok)
+    return fence;
+  const result = SkillFrontmatterSchema.safeParse(fence.data);
+  if (!result.success) {
+    return {
+      ok: false,
+      error: {
+        kind: "schema",
+        message: result.error.issues.map((i) => `${i.path.join(".") || "(root)"}: ${i.message}`).join("; ")
+      }
+    };
+  }
+  return { ok: true, frontmatter: result.data };
+}
+function skillIdentifier(frontmatter) {
+  return frontmatter.id ?? frontmatter.name;
+}
+var init_skill_frontmatter = __esm(() => {
+  init_dist();
+  init_schemas();
+});
+
 // src/commands/install.command.ts
 var exports_install_command = {};
 __export(exports_install_command, {
+  verifyRenderedFiles: () => verifyRenderedFiles,
   installPresetCommand: () => installPresetCommand,
   installCommand: () => installCommand
 });
+import { readFile as readFile8 } from "node:fs/promises";
 import { homedir as homedir7 } from "node:os";
-import { resolve as resolve12 } from "node:path";
+import { basename as basename3, dirname as dirname4, resolve as resolve12, sep as sep4 } from "node:path";
 async function installCommand(options) {
   const { target, dryRun, force, global: isGlobal, output, projectRoot } = options;
   const baseDir = isGlobal ? homedir7() : projectRoot;
@@ -16767,14 +17425,22 @@ async function installCommand(options) {
           installer = createCodexInstaller(spec);
           break;
         case "gemini":
+          installer = createGeminiInstaller(spec);
+          break;
         case "agy":
           installer = createAgyInstaller(spec);
           break;
+        case "cursor":
+          installer = createCursorInstaller(spec);
+          break;
+        case "pi":
+          installer = createPiInstaller(spec);
+          break;
         default:
           continue;
       }
       const generatedFiles = await installer.generate();
-      const isAgyGlobal = (t === "agy" || t === "gemini") && isGlobal;
+      const isAgyGlobal = t === "agy" && isGlobal;
       const targetBase = isAgyGlobal ? resolve12(homedir7(), ".gemini", "config") : baseDir;
       const resolvedFiles = generatedFiles.map((f) => ({
         ...f,
@@ -16838,6 +17504,40 @@ async function installCommand(options) {
     };
   }
 }
+async function verifyRenderedFiles(manifest, baseDir, results) {
+  const templatePrefixes = manifest.entries.filter((e) => e.template === true).map((e) => resolve12(baseDir, e.dest));
+  const warnings = [];
+  for (const r of results) {
+    if (r.dryRun || r.action === "skipped" || r.action === "error")
+      continue;
+    const isTemplateFile = templatePrefixes.some((p) => r.dest === p || r.dest.startsWith(p + sep4));
+    if (!isTemplateFile)
+      continue;
+    let content;
+    try {
+      content = await readFile8(r.dest, "utf-8");
+    } catch {
+      continue;
+    }
+    const leaked = [...new Set(content.match(/\{\{[A-Z_]+\}\}/g) ?? [])];
+    if (leaked.length > 0) {
+      warnings.push(`${r.dest}: unresolved placeholder(s) ${leaked.join(", ")}`);
+    }
+    if (basename3(r.dest) === "SKILL.md") {
+      const parsed = parseSkillFrontmatter(content);
+      if (!parsed.ok) {
+        warnings.push(`${r.dest}: ${parsed.error.kind} — ${parsed.error.message}`);
+      } else {
+        const dir = basename3(dirname4(r.dest));
+        const ident = skillIdentifier(parsed.frontmatter);
+        if (ident !== dir) {
+          warnings.push(`${r.dest}: identifier "${ident}" does not match its directory "${dir}"`);
+        }
+      }
+    }
+  }
+  return warnings;
+}
 async function installPresetCommand(options) {
   const { target, dryRun, force, global: isGlobal, projectRoot } = options;
   const baseDir = isGlobal ? homedir7() : projectRoot;
@@ -16854,6 +17554,7 @@ async function installPresetCommand(options) {
       }
     }
     const allFileResults = [];
+    const postInstallWarnings = [];
     for (const t of targets) {
       const manifest = await loadManifest(t);
       const modelConfig = await loadModelConfig(t);
@@ -16861,6 +17562,9 @@ async function installPresetCommand(options) {
       for (const r of results) {
         allFileResults.push({ target: t, ...r });
       }
+      if (!dryRun) {
+        postInstallWarnings.push(...await verifyRenderedFiles(manifest, baseDir, results));
+      }
     }
     const errors3 = allFileResults.filter((r) => r.action === "error");
     return {
@@ -16872,6 +17576,7 @@ async function installPresetCommand(options) {
         targets,
         global: isGlobal,
         dryRun,
+        postInstallWarnings,
         locale,
         presetResolution,
         fileResults: allFileResults
@@ -16892,7 +17597,10 @@ var init_install_command = __esm(() => {
   init_agy_installer();
   init_claude_installer();
   init_codex_installer();
+  init_cursor_installer();
+  init_gemini_installer();
   init_opencode_installer();
+  init_pi_installer();
   init_config_loader();
   init_project_detector();
   init_file_writer();
@@ -16900,12 +17608,13 @@ var init_install_command = __esm(() => {
   init_manifest_loader();
   init_preset_loader();
   init_runner_target();
+  init_skill_frontmatter();
 });
 
 // src/core/security/target-compatibility.ts
-import { readFile as readFile8 } from "node:fs/promises";
+import { readFile as readFile9 } from "node:fs/promises";
 async function loadTargetSecurityCompatibility() {
-  const policy = $parse(await readFile8(POLICY_PATH, "utf-8"));
+  const policy = $parse(await readFile9(POLICY_PATH, "utf-8"));
   const targets = [
     "opencode",
     "claude",
@@ -16939,8 +17648,8 @@ var init_target_compatibility = __esm(() => {
 });
 
 // src/core/presets/update-checker.ts
-import { stat as stat2, readFile as readFile9 } from "node:fs/promises";
-import { resolve as resolve13, join as join8 } from "node:path";
+import { stat as stat2, readFile as readFile10 } from "node:fs/promises";
+import { resolve as resolve13, join as join8, basename as basename4, dirname as dirname5 } from "node:path";
 import { homedir as homedir8 } from "node:os";
 function getTargetInstallationPath(target, basePath, isGlobal) {
   if (target === "agy") {
@@ -16978,14 +17687,7 @@ async function validateAgentFileSizes(basePath, isGlobal) {
   return largeFiles;
 }
 async function validateAgentMarkers(basePath, isGlobal) {
-  const targetsToCheck = [
-    "opencode",
-    "claude",
-    "codex",
-    "gemini",
-    "cursor",
-    "agy"
-  ];
+  const targetsToCheck = INDIVIDUAL_TARGETS;
   const results = [];
   for (const target of targetsToCheck) {
     const isInstalled = await isTargetInstalled(target, basePath, isGlobal);
@@ -17015,7 +17717,7 @@ async function validateAgentMarkers(basePath, isGlobal) {
       const files = await resolveEntryFiles(resolvedEntry, PRESETS_DIR, targetBaseDir);
       for (const { dest } of files) {
         try {
-          const content = await readFile9(dest, "utf-8");
+          const content = await readFile10(dest, "utf-8");
           const beginCount = content.split(MANAGED_BEGIN_MARKER).length - 1;
           const endCount = content.split(MANAGED_END_MARKER).length - 1;
           if (beginCount === 0 && endCount === 0) {
@@ -17037,10 +17739,63 @@ async function validateAgentMarkers(basePath, isGlobal) {
   }
   return results;
 }
+async function validateSkillFrontmatterFiles(basePath, isGlobal) {
+  const targetsToCheck = INDIVIDUAL_TARGETS;
+  const results = [];
+  for (const target of targetsToCheck) {
+    const isInstalled = await isTargetInstalled(target, basePath, isGlobal);
+    if (!isInstalled)
+      continue;
+    let manifest;
+    try {
+      manifest = await loadManifest(target);
+    } catch {
+      continue;
+    }
+    for (const entry of manifest.entries) {
+      if (!entry.dest.split(/[\\/]/).includes("skills"))
+        continue;
+      let resolvedEntry = entry;
+      let targetBaseDir = basePath;
+      if (target === "agy" && isGlobal) {
+        targetBaseDir = join8(homedir8(), ".gemini", "config");
+        resolvedEntry = {
+          ...entry,
+          dest: entry.dest.replace(/^\.agents\/?/, "")
+        };
+      }
+      const files = await resolveEntryFiles(resolvedEntry, PRESETS_DIR, targetBaseDir);
+      for (const { dest } of files) {
+        if (basename4(dest) !== "SKILL.md")
+          continue;
+        let content;
+        try {
+          content = await readFile10(dest, "utf-8");
+        } catch {
+          continue;
+        }
+        const parsed = parseSkillFrontmatter(content);
+        if (!parsed.ok) {
+          results.push({ path: dest, error: `${parsed.error.kind}: ${parsed.error.message}` });
+          continue;
+        }
+        const dir = basename4(dirname5(dest));
+        const ident = skillIdentifier(parsed.frontmatter);
+        if (ident !== dir) {
+          results.push({
+            path: dest,
+            error: `identifier "${ident}" does not match its directory "${dir}"`
+          });
+        }
+      }
+    }
+  }
+  return results;
+}
 async function fileContentDiffers(pathA, pathB) {
   try {
-    const contentA = await readFile9(pathA, "utf-8");
-    const contentB = await readFile9(pathB, "utf-8");
+    const contentA = await readFile10(pathA, "utf-8");
+    const contentB = await readFile10(pathB, "utf-8");
     return contentA.trim() !== contentB.trim();
   } catch {
     try {
@@ -17058,50 +17813,42 @@ async function loadSkillsLock(basePath) {
   ];
   for (const p of paths) {
     try {
-      const content = await readFile9(p, "utf-8");
+      const content = await readFile10(p, "utf-8");
       return JSON.parse(content);
     } catch {}
   }
   return null;
 }
-async function getLatestSkillVersion(skillId) {
-  const targets = [
-    "opencode",
-    "agy",
-    "claude",
-    "codex",
-    "gemini",
-    "cursor"
-  ];
-  for (const target of targets) {
-    const skillPath = resolve13(ROOT_PRESETS_DIR, target, "skills", skillId, "SKILL.md");
-    try {
-      const content = await readFile9(skillPath, "utf-8");
-      const fmMatch = content.match(/^---\r?\n([\s\S]*?)\r?\n---/);
-      if (fmMatch) {
-        const parsed = $parse(fmMatch[1]);
-        if (parsed && parsed.id === skillId && parsed.version) {
-          return String(parsed.version);
-        }
-      }
-    } catch {}
+async function loadSkillsRegistry() {
+  if (registryLoadAttempted) {
+    return cachedRegistry ?? null;
   }
+  registryLoadAttempted = true;
+  try {
+    const content = await readFile10(SKILLS_REGISTRY_PATH, "utf-8");
+    const parsed = JSON.parse(content);
+    const result = SkillsRegistrySchema.safeParse(parsed);
+    if (result.success) {
+      cachedRegistry = result.data;
+      return cachedRegistry;
+    }
+  } catch {}
   return null;
 }
+async function getLatestSkillVersion(skillId) {
+  const registry = await loadSkillsRegistry();
+  if (!registry) {
+    return null;
+  }
+  return registry.skills[skillId]?.version ?? null;
+}
 async function checkUpdates(basePath, isGlobal) {
   const localCouncil = resolve13(basePath, ".codeconductor", "presets", "council.yml");
   const bundledCouncil = resolve13(SRC_PRESETS_DIR, "council", "council.yml");
   const councilHasUpdate = await fileContentDiffers(localCouncil, bundledCouncil);
   const localPolicy = resolve13(basePath, ".codeconductor", "presets", "policy.yml");
   const policyHasUpdate = await fileContentDiffers(localPolicy, POLICY_PATH);
-  const targetsToCheck = [
-    "opencode",
-    "claude",
-    "codex",
-    "gemini",
-    "cursor",
-    "agy"
-  ];
+  const targetsToCheck = INDIVIDUAL_TARGETS;
   const targetResults = [];
   let locale = "en";
   try {
@@ -17142,14 +17889,14 @@ async function checkUpdates(basePath, isGlobal) {
       for (const { src, dest } of files) {
         let expectedContent;
         try {
-          const srcContent = await readFile9(src, "utf-8");
+          const srcContent = await readFile10(src, "utf-8");
           expectedContent = isTemplate && modelConfig ? renderTemplate(srcContent, modelConfig, src, locale) : srcContent;
         } catch {
           continue;
         }
         let destContent;
         try {
-          destContent = await readFile9(dest, "utf-8");
+          destContent = await readFile10(dest, "utf-8");
         } catch {
           changedFiles.push(dest);
           continue;
@@ -17227,7 +17974,7 @@ async function checkUpdates(basePath, isGlobal) {
               const dest = resolve13(targetBase, targetPath);
               let destContent;
               try {
-                destContent = await readFile9(dest, "utf-8");
+                destContent = await readFile10(dest, "utf-8");
                 if (destContent.trim() !== f.content.trim()) {
                   changedFiles.push(dest);
                 }
@@ -17283,12 +18030,15 @@ async function checkUpdates(basePath, isGlobal) {
     skills: skillResults
   };
 }
+var cachedRegistry, registryLoadAttempted = false;
 var init_update_checker = __esm(() => {
-  init_dist();
   init_manifest_loader();
   init_file_copier();
+  init_skill_frontmatter();
   init_config_loader();
   init_package_paths();
+  init_schemas();
+  init_runner_target();
   init_complementary_detector();
 });
 
@@ -17449,6 +18199,122 @@ async function doctorCommand(options) {
         message: "All agent files have valid managed markers"
       });
     }
+    const manifestErrors = [];
+    for (const target of INDIVIDUAL_TARGETS) {
+      try {
+        await loadManifest(target);
+      } catch (e) {
+        manifestErrors.push(`${target}: ${e instanceof Error ? e.message : String(e)}`);
+      }
+    }
+    if (manifestErrors.length > 0) {
+      checks.push({
+        name: "manifest-schema",
+        status: "fail",
+        message: `Invalid manifest(s): ${manifestErrors.join("; ")}`
+      });
+    } else {
+      checks.push({
+        name: "manifest-schema",
+        status: "pass",
+        message: `All ${INDIVIDUAL_TARGETS.length} target manifests are valid`
+      });
+    }
+    const targetCapabilityErrors = [];
+    for (const target of INDIVIDUAL_TARGETS) {
+      try {
+        await loadTargetCapabilities(target);
+      } catch (e) {
+        targetCapabilityErrors.push(`${target}: ${e instanceof Error ? e.message : String(e)}`);
+      }
+    }
+    if (targetCapabilityErrors.length > 0) {
+      checks.push({
+        name: "target-capabilities",
+        status: "fail",
+        message: `Invalid target capability file(s): ${targetCapabilityErrors.join("; ")}`
+      });
+    } else {
+      checks.push({
+        name: "target-capabilities",
+        status: "pass",
+        message: `All ${INDIVIDUAL_TARGETS.length} target capability files are valid`
+      });
+    }
+    const { readFile: readFile11 } = await import("node:fs/promises");
+    const { SkillsRegistrySchema: SkillsRegistrySchema2 } = await Promise.resolve().then(() => (init_schemas(), exports_schemas));
+    const { SKILLS_REGISTRY_PATH: SKILLS_REGISTRY_PATH2 } = await Promise.resolve().then(() => (init_package_paths(), exports_package_paths));
+    try {
+      const registryContent = await readFile11(SKILLS_REGISTRY_PATH2, "utf-8");
+      const registryData = JSON.parse(registryContent);
+      const registryResult = SkillsRegistrySchema2.safeParse(registryData);
+      if (registryResult.success) {
+        const skillCount = Object.keys(registryResult.data.skills).length;
+        checks.push({
+          name: "skills-registry",
+          status: "pass",
+          message: `Skills registry is valid (${skillCount} skills)`
+        });
+      } else {
+        checks.push({
+          name: "skills-registry",
+          status: "fail",
+          message: `Skills registry validation failed: ${registryResult.error.message}`
+        });
+      }
+    } catch (e) {
+      checks.push({
+        name: "skills-registry",
+        status: "fail",
+        message: `Skills registry error: ${e instanceof Error ? e.message : String(e)}`
+      });
+    }
+    const modelConfigs = await Promise.all(INDIVIDUAL_TARGETS.map(async (target) => {
+      try {
+        const agents = (await loadModelConfig(target)).agents;
+        return { target, agents };
+      } catch {
+        return null;
+      }
+    }));
+    const loadedConfigs = modelConfigs.filter((c) => c !== null);
+    const allRoles = new Set(loadedConfigs.flatMap((c) => Object.keys(c.agents)));
+    const roleGaps = [];
+    for (const role of allRoles) {
+      const missingIn = loadedConfigs.filter((c) => !(role in c.agents)).map((c) => c.target);
+      if (missingIn.length > 0) {
+        roleGaps.push(`${role} missing in ${missingIn.join(", ")}`);
+      }
+    }
+    if (roleGaps.length > 0) {
+      checks.push({
+        name: "model-config-parity",
+        status: "warn",
+        message: `Role parity gaps across target model configs: ${roleGaps.join("; ")}`
+      });
+    } else {
+      checks.push({
+        name: "model-config-parity",
+        status: "pass",
+        message: `All ${allRoles.size} agent roles are defined for every target`
+      });
+    }
+    const skillFrontmatterLocal = await validateSkillFrontmatterFiles(projectRoot, false);
+    const skillFrontmatterGlobal = await validateSkillFrontmatterFiles(homedir9(), true);
+    const allSkillFrontmatterErrors = [...skillFrontmatterLocal, ...skillFrontmatterGlobal];
+    if (allSkillFrontmatterErrors.length > 0) {
+      checks.push({
+        name: "skill-frontmatter",
+        status: "warn",
+        message: `Invalid skill frontmatter: ${allSkillFrontmatterErrors.map((f) => `${f.path} (${f.error})`).join(", ")}`
+      });
+    } else {
+      checks.push({
+        name: "skill-frontmatter",
+        status: "pass",
+        message: "All installed skills have valid frontmatter"
+      });
+    }
     const securityCompatibility = await loadTargetSecurityCompatibility();
     for (const compatibility of securityCompatibility) {
       checks.push({
@@ -17462,8 +18328,8 @@ async function doctorCommand(options) {
     const graphPath = join9(projectRoot, ".codeconductor", "product-graph.json");
     if (existsSync3(graphPath)) {
       try {
-        const { readFile: readFile10 } = await import("node:fs/promises");
-        const raw = await readFile10(graphPath, "utf-8");
+        const { readFile: readFile12 } = await import("node:fs/promises");
+        const raw = await readFile12(graphPath, "utf-8");
         const graph = ProductGraphSchema2.parse(JSON.parse(raw));
         checks.push({
           name: "product-graph",
@@ -17543,6 +18409,8 @@ var init_doctor_command = __esm(() => {
   init_config_loader();
   init_target_compatibility();
   init_update_checker();
+  init_manifest_loader();
+  init_runner_target();
 });
 
 // src/commands/update.command.ts
@@ -17551,8 +18419,8 @@ __export(exports_update_command, {
   updateCommand: () => updateCommand
 });
 import { homedir as homedir10 } from "node:os";
-import { resolve as resolve14, dirname as dirname4 } from "node:path";
-import { mkdir as mkdir6, readFile as readFile10, writeFile as writeFile5, stat as stat3 } from "node:fs/promises";
+import { resolve as resolve14, dirname as dirname6 } from "node:path";
+import { mkdir as mkdir6, readFile as readFile11, writeFile as writeFile5, stat as stat3 } from "node:fs/promises";
 async function updateCommand(options) {
   const { dryRun, force, global: isGlobal, output, projectRoot } = options;
   const basePath = isGlobal ? homedir10() : projectRoot;
@@ -17620,8 +18488,8 @@ async function updateCommand(options) {
       const localCouncil = resolve14(basePath, ".codeconductor", "presets", "council.yml");
       const bundledCouncil = resolve14(SRC_PRESETS_DIR, "council", "council.yml");
       try {
-        const content = await readFile10(bundledCouncil, "utf-8");
-        await mkdir6(dirname4(localCouncil), { recursive: true });
+        const content = await readFile11(bundledCouncil, "utf-8");
+        await mkdir6(dirname6(localCouncil), { recursive: true });
         await writeFile5(localCouncil, content, "utf-8");
         updated.push(localCouncil);
       } catch (e) {
@@ -17631,8 +18499,8 @@ async function updateCommand(options) {
     if (updateResults.policy) {
       const localPolicy = resolve14(basePath, ".codeconductor", "presets", "policy.yml");
       try {
-        const content = await readFile10(POLICY_PATH, "utf-8");
-        await mkdir6(dirname4(localPolicy), { recursive: true });
+        const content = await readFile11(POLICY_PATH, "utf-8");
+        await mkdir6(dirname6(localPolicy), { recursive: true });
         await writeFile5(localPolicy, content, "utf-8");
         updated.push(localPolicy);
       } catch (e) {
@@ -17723,7 +18591,7 @@ async function updateCommand(options) {
         }
       } catch {}
       try {
-        await mkdir6(dirname4(lockDest), { recursive: true });
+        await mkdir6(dirname6(lockDest), { recursive: true });
         await writeFile5(lockDest, JSON.stringify(newSkillsLock, null, 2), "utf-8");
         updated.push(lockDest);
       } catch (e) {
@@ -17759,6 +18627,179 @@ var init_update_command = __esm(() => {
   init_package_paths();
 });
 
+// src/commands/migrate.command.ts
+var exports_migrate_command = {};
+__export(exports_migrate_command, {
+  migratePermissionRules: () => migratePermissionRules,
+  migrateCommand: () => migrateCommand,
+  findOrphanedPromptVersions: () => findOrphanedPromptVersions
+});
+import { readFile as readFile12, readdir as readdir3, rm as rm2, writeFile as writeFile6 } from "node:fs/promises";
+import { homedir as homedir11 } from "node:os";
+import { join as join10, resolve as resolve15 } from "node:path";
+function migratePermissionRules(settings) {
+  const permissions = settings.permissions;
+  if (typeof permissions !== "object" || permissions === null) {
+    return { settings, changes: [], duplicatesRemoved: [] };
+  }
+  const changes = [];
+  const duplicatesRemoved = [];
+  const nextPermissions = { ...permissions };
+  for (const list of PERMISSION_LISTS) {
+    const rules = nextPermissions[list];
+    if (!Array.isArray(rules))
+      continue;
+    const rewritten = rules.map((rule) => {
+      if (typeof rule !== "string")
+        return rule;
+      const match = rule.match(WRITE_RULE);
+      if (!match)
+        return rule;
+      const to = `Edit(${match[1]})`;
+      changes.push({ list, from: rule, to });
+      return to;
+    });
+    const seen = new Set;
+    const deduped = [];
+    for (const rule of rewritten) {
+      const key = typeof rule === "string" ? rule : JSON.stringify(rule);
+      if (seen.has(key)) {
+        if (typeof rule === "string")
+          duplicatesRemoved.push(rule);
+        continue;
+      }
+      seen.add(key);
+      deduped.push(rule);
+    }
+    nextPermissions[list] = deduped;
+  }
+  return {
+    settings: { ...settings, permissions: nextPermissions },
+    changes,
+    duplicatesRemoved
+  };
+}
+function resolveSettingsPath(options) {
+  if (options.file)
+    return resolve15(options.projectRoot, options.file);
+  const base = options.global ? homedir11() : options.projectRoot;
+  return join10(base, ".claude", "settings.json");
+}
+async function findOrphanedPromptVersions(basePath, isGlobal) {
+  const found = [];
+  const seenDirs = new Set;
+  for (const target of INDIVIDUAL_TARGETS) {
+    const installed = await isTargetInstalled(target, basePath, isGlobal);
+    if (!installed)
+      continue;
+    const installPath = getTargetInstallationPath(target, basePath, isGlobal);
+    const promptsDir = join10(installPath, "prompts");
+    if (seenDirs.has(promptsDir))
+      continue;
+    seenDirs.add(promptsDir);
+    let entries;
+    try {
+      entries = await readdir3(promptsDir, { withFileTypes: true });
+    } catch {
+      continue;
+    }
+    for (const entry of entries) {
+      if (!entry.isDirectory() || !VERSION_DIR_NAME.test(entry.name))
+        continue;
+      if (entry.name === CURRENT_PRESET_VERSION)
+        continue;
+      found.push({ target, path: join10(promptsDir, entry.name), version: entry.name });
+    }
+  }
+  return found;
+}
+async function migrateCommand(options) {
+  const settingsPath = resolveSettingsPath(options);
+  let raw = null;
+  try {
+    raw = await readFile12(settingsPath, "utf-8");
+  } catch (error) {
+    if (error.code !== "ENOENT") {
+      return {
+        code: 1,
+        data: {
+          success: false,
+          command: "migrate",
+          errors: [`Could not read ${settingsPath}: ${String(error)}`]
+        }
+      };
+    }
+  }
+  let rewritten = [];
+  let duplicatesRemoved = [];
+  let settingsChanged = false;
+  if (raw !== null) {
+    let settings;
+    try {
+      settings = JSON.parse(raw);
+    } catch (error) {
+      return {
+        code: 1,
+        data: {
+          success: false,
+          command: "migrate",
+          errors: [`${settingsPath} is not valid JSON: ${String(error)}`]
+        }
+      };
+    }
+    const migration = migratePermissionRules(settings);
+    rewritten = migration.changes;
+    duplicatesRemoved = migration.duplicatesRemoved;
+    settingsChanged = migration.changes.length > 0 || migration.duplicatesRemoved.length > 0;
+    if (settingsChanged && !options.dryRun) {
+      await writeFile6(settingsPath, `${JSON.stringify(migration.settings, null, 2)}
+`, "utf-8");
+    }
+  }
+  const basePath = options.global ? homedir11() : options.projectRoot;
+  const orphanedPromptVersions = await findOrphanedPromptVersions(basePath, options.global);
+  let orphanedPromptVersionsRemoved = false;
+  if (orphanedPromptVersions.length > 0 && !options.dryRun) {
+    for (const dir of orphanedPromptVersions) {
+      await rm2(dir.path, { recursive: true, force: true });
+    }
+    orphanedPromptVersionsRemoved = true;
+  }
+  const changed = settingsChanged && !options.dryRun || orphanedPromptVersionsRemoved;
+  let message;
+  if (!settingsChanged && orphanedPromptVersions.length === 0) {
+    message = raw === null ? "No settings.json found and no orphaned prompt version directories found — nothing to migrate." : "No Write(path) permission rules and no orphaned prompt version directories found — nothing to migrate.";
+  }
+  return {
+    code: 0,
+    data: {
+      success: true,
+      command: "migrate",
+      file: settingsPath,
+      settingsFileFound: raw !== null,
+      changed,
+      dryRun: options.dryRun,
+      rewritten: rewritten.map((c) => ({ list: c.list, from: c.from, to: c.to })),
+      duplicatesRemoved,
+      orphanedPromptVersions: orphanedPromptVersions.map((d) => ({
+        target: d.target,
+        path: d.path,
+        version: d.version
+      })),
+      orphanedPromptVersionsRemoved,
+      ...message ? { message } : {}
+    }
+  };
+}
+var PERMISSION_LISTS, WRITE_RULE, VERSION_DIR_NAME;
+var init_migrate_command = __esm(() => {
+  init_update_checker();
+  init_runner_target();
+  PERMISSION_LISTS = ["allow", "deny", "ask"];
+  WRITE_RULE = /^Write\((.+)\)$/;
+  VERSION_DIR_NAME = /^v\d+\.\d+\.\d+$/;
+});
+
 // src/core/ask/recommend-flow.ts
 function includesAny(haystack, needles) {
   return needles.some((n) => haystack.includes(n));
@@ -17948,8 +18989,8 @@ var exports_help_command = {};
 __export(exports_help_command, {
   helpCommand: () => helpCommand
 });
-import { readdir as readdir3 } from "node:fs/promises";
-import { join as join10 } from "node:path";
+import { readdir as readdir4 } from "node:fs/promises";
+import { join as join11 } from "node:path";
 async function scanPresetDir(projectRoot, target) {
   const inventory = {
     target,
@@ -17958,13 +18999,13 @@ async function scanPresetDir(projectRoot, target) {
     agents: [],
     workflows: []
   };
-  const presetDir = join10(projectRoot, "presets", target);
+  const presetDir = join11(projectRoot, "presets", target);
   try {
-    const entries = await readdir3(presetDir, { withFileTypes: true });
+    const entries = await readdir4(presetDir, { withFileTypes: true });
     for (const entry of entries) {
       if (entry.isDirectory()) {
-        const subDir = join10(presetDir, entry.name);
-        const subEntries = await readdir3(subDir, { withFileTypes: true });
+        const subDir = join11(presetDir, entry.name);
+        const subEntries = await readdir4(subDir, { withFileTypes: true });
         for (const sub of subEntries) {
           if (sub.isFile()) {
             const itemName = sub.name.replace(/\.[^.]+$/, "");
@@ -18089,14 +19130,14 @@ var exports_debt_harvest_command = {};
 __export(exports_debt_harvest_command, {
   debtHarvestCommand: () => debtHarvestCommand
 });
-import { readdir as readdir4, readFile as readFile11, writeFile as writeFile6, mkdir as mkdir7 } from "node:fs/promises";
-import { join as join11, relative as relative4, extname } from "node:path";
+import { readdir as readdir5, readFile as readFile13, writeFile as writeFile7, mkdir as mkdir7 } from "node:fs/promises";
+import { join as join12, relative as relative4, extname } from "node:path";
 async function walkDir(dir, extensions) {
   const results = [];
   try {
-    const entries = await readdir4(dir, { withFileTypes: true });
+    const entries = await readdir5(dir, { withFileTypes: true });
     for (const entry of entries) {
-      const fullPath = join11(dir, entry.name);
+      const fullPath = join12(dir, entry.name);
       if (entry.isDirectory()) {
         if (entry.name.startsWith(".") || entry.name === "node_modules")
           continue;
@@ -18163,19 +19204,19 @@ function renderLedger(entries) {
 async function debtHarvestCommand(options) {
   const { projectRoot, dir = "src", output } = options;
   try {
-    const targetDir = join11(projectRoot, dir);
+    const targetDir = join12(projectRoot, dir);
     const files = await walkDir(targetDir, SOURCE_EXTENSIONS);
     const allEntries = [];
     for (const file of files) {
-      const content = await readFile11(file, "utf-8");
+      const content = await readFile13(file, "utf-8");
       const entries = extractDefers(content, relative4(projectRoot, file));
       allEntries.push(...entries);
     }
-    const ledgerDir = join11(projectRoot, ".codeconductor");
+    const ledgerDir = join12(projectRoot, ".codeconductor");
     await mkdir7(ledgerDir, { recursive: true });
-    const ledgerPath = join11(ledgerDir, "debt-ledger.md");
+    const ledgerPath = join12(ledgerDir, "debt-ledger.md");
     const ledgerContent = renderLedger(allEntries);
-    await writeFile6(ledgerPath, ledgerContent, "utf-8");
+    await writeFile7(ledgerPath, ledgerContent, "utf-8");
     if (output === "json") {
       return {
         code: 0,
@@ -18608,27 +19649,27 @@ var init_goal_planner = __esm(() => {
 });
 
 // src/core/product-graph/paths.ts
-import { join as join12 } from "node:path";
+import { join as join13 } from "node:path";
 function productGraphPath(projectRoot) {
-  return join12(projectRoot, PRODUCT_DIR, PRODUCT_GRAPH_FILE);
+  return join13(projectRoot, PRODUCT_DIR, PRODUCT_GRAPH_FILE);
 }
 function productMetaPath(projectRoot) {
-  return join12(projectRoot, PRODUCT_DIR, PRODUCT_META_FILE);
+  return join13(projectRoot, PRODUCT_DIR, PRODUCT_META_FILE);
 }
 function eventsPath(projectRoot) {
-  return join12(projectRoot, PRODUCT_DIR, EVENTS_FILE);
+  return join13(projectRoot, PRODUCT_DIR, EVENTS_FILE);
 }
 function operationalStatePath(projectRoot) {
-  return join12(projectRoot, PRODUCT_DIR, OPERATIONAL_STATE_FILE);
+  return join13(projectRoot, PRODUCT_DIR, OPERATIONAL_STATE_FILE);
 }
 function strategicPath(projectRoot) {
-  return join12(projectRoot, PRODUCT_DIR, STRATEGIC_FILE);
+  return join13(projectRoot, PRODUCT_DIR, STRATEGIC_FILE);
 }
 function productReportPath(projectRoot) {
-  return join12(projectRoot, PRODUCT_DIR, PRODUCT_REPORT_FILE);
+  return join13(projectRoot, PRODUCT_DIR, PRODUCT_REPORT_FILE);
 }
 function evidenceDir(projectRoot) {
-  return join12(projectRoot, PRODUCT_DIR, EVIDENCE_DIR);
+  return join13(projectRoot, PRODUCT_DIR, EVIDENCE_DIR);
 }
 var PRODUCT_DIR = ".codeconductor", PRODUCT_GRAPH_FILE = "product-graph.json", PRODUCT_META_FILE = "product-meta.json", EVENTS_FILE = "events.jsonl", OPERATIONAL_STATE_FILE = "operational-state.json", STRATEGIC_FILE = "strategic.json", PRODUCT_REPORT_FILE = "product-report.md", EVIDENCE_DIR = "evidence";
 var init_paths = () => {};
@@ -18645,11 +19686,11 @@ __export(exports_graph_store, {
   findPath: () => findPath,
   countByType: () => countByType
 });
-import { mkdir as mkdir8, readFile as readFile12, writeFile as writeFile7 } from "node:fs/promises";
-import { dirname as dirname5 } from "node:path";
+import { mkdir as mkdir8, readFile as readFile14, writeFile as writeFile8 } from "node:fs/promises";
+import { dirname as dirname7 } from "node:path";
 async function loadGraph(projectRoot) {
   try {
-    const raw = await readFile12(productGraphPath(projectRoot), "utf-8");
+    const raw = await readFile14(productGraphPath(projectRoot), "utf-8");
     return ok(ProductGraphSchema.parse(JSON.parse(raw)));
   } catch (e) {
     if (e.code === "ENOENT") {
@@ -18662,8 +19703,8 @@ async function saveGraph(projectRoot, graph) {
   try {
     const validated = ProductGraphSchema.parse(graph);
     const path = productGraphPath(projectRoot);
-    await mkdir8(dirname5(path), { recursive: true });
-    await writeFile7(path, JSON.stringify(validated, null, 2), "utf-8");
+    await mkdir8(dirname7(path), { recursive: true });
+    await writeFile8(path, JSON.stringify(validated, null, 2), "utf-8");
     return ok(undefined);
   } catch (e) {
     return err(e instanceof Error ? e : new Error(String(e)));
@@ -18830,8 +19871,8 @@ __export(exports_goal_state, {
   markTaskBlocked: () => markTaskBlocked,
   loadGoal: () => loadGoal
 });
-import { mkdir as mkdir9, readFile as readFile13, writeFile as writeFile8 } from "node:fs/promises";
-import { resolve as resolve15 } from "node:path";
+import { mkdir as mkdir9, readFile as readFile15, writeFile as writeFile9 } from "node:fs/promises";
+import { resolve as resolve16 } from "node:path";
 function validateGoalGraph2(graph) {
   const ids = new Set(graph.tasks.map((t) => t.id));
   if (ids.size !== graph.tasks.length) {
@@ -18874,16 +19915,16 @@ async function writeGoal(projectRoot, graph) {
   const validation = validateGoalGraph2(graph);
   if (!validation.success)
     return validation;
-  const dir = resolve15(projectRoot, ".codeconductor");
+  const dir = resolve16(projectRoot, ".codeconductor");
   await mkdir9(dir, { recursive: true });
   const yaml = $stringify(graph);
-  await writeFile8(resolve15(dir, "current-goal.yml"), yaml, "utf-8");
+  await writeFile9(resolve16(dir, "current-goal.yml"), yaml, "utf-8");
   return ok(undefined);
 }
 async function loadGoal(projectRoot) {
   try {
-    const filePath = resolve15(projectRoot, GOAL_FILE);
-    const content = await readFile13(filePath, "utf-8");
+    const filePath = resolve16(projectRoot, GOAL_FILE);
+    const content = await readFile15(filePath, "utf-8");
     const data = $parse(content);
     const validated = GoalGraphSchema.parse(data);
     return validateGoalGraph2(validated);
@@ -19045,8 +20086,8 @@ var init_goal_command = __esm(() => {
 });
 
 // src/core/openspec/backlog-parser.ts
-import { readFile as readFile14 } from "node:fs/promises";
-import { resolve as resolve16 } from "node:path";
+import { readFile as readFile16 } from "node:fs/promises";
+import { resolve as resolve17 } from "node:path";
 function parseBool(value) {
   const v = value.trim().toLowerCase();
   return v === "yes" || v === "true";
@@ -19220,8 +20261,8 @@ function parseBacklogMarkdown(content) {
 }
 async function loadBacklog(projectRoot) {
   try {
-    const filePath = resolve16(projectRoot, BACKLOG_FILE);
-    const content = await readFile14(filePath, "utf-8");
+    const filePath = resolve17(projectRoot, BACKLOG_FILE);
+    const content = await readFile16(filePath, "utf-8");
     return parseBacklogMarkdown(content);
   } catch (e) {
     return err(e instanceof Error ? e : new Error(String(e)));
@@ -19270,14 +20311,14 @@ function slugify(text) {
 }
 
 // src/core/knowledge/source-parsers.ts
-import { readFile as readFile15 } from "node:fs/promises";
-import { join as join13 } from "node:path";
+import { readFile as readFile17 } from "node:fs/promises";
+import { join as join14 } from "node:path";
 async function parseAdrFile(filePath) {
   try {
-    const content = await readFile15(filePath, "utf-8");
-    const basename3 = filePath.split("/").pop() ?? "";
-    const idMatch = basename3.match(/adr-(\d+)/i);
-    const id = idMatch ? `adr-${idMatch[1]}` : slugify(basename3);
+    const content = await readFile17(filePath, "utf-8");
+    const basename5 = filePath.split("/").pop() ?? "";
+    const idMatch = basename5.match(/adr-(\d+)/i);
+    const id = idMatch ? `adr-${idMatch[1]}` : slugify(basename5);
     const titleMatch = content.match(/^#\s+ADR-\d+:\s*(.+)$/m);
     const statusMatch = content.match(/\*\*Status:\*\*\s*(\w+)/i);
     const contextSection = extractSection(content, "Context");
@@ -19287,7 +20328,7 @@ async function parseAdrFile(filePath) {
 `).filter((l) => l.trim().startsWith("-") || l.trim().startsWith("*")).map((l) => l.replace(/^[\s*-]+/, "").trim()).filter(Boolean);
     return {
       id,
-      title: titleMatch?.[1]?.trim() ?? basename3,
+      title: titleMatch?.[1]?.trim() ?? basename5,
       status: statusMatch?.[1]?.toLowerCase() ?? "unknown",
       context: contextSection.trim(),
       decision: decisionSection.trim(),
@@ -19323,7 +20364,7 @@ function adrToEntities(adr, source) {
 }
 async function parseReadmeEntities(projectRoot, productName) {
   try {
-    const content = await readFile15(join13(projectRoot, "README.md"), "utf-8");
+    const content = await readFile17(join14(projectRoot, "README.md"), "utf-8");
     const firstPara = content.split(`
 
 `).find((p) => p.trim() && !p.startsWith("#") && !p.startsWith(">")) ?? "";
@@ -19344,7 +20385,7 @@ async function parseReadmeEntities(projectRoot, productName) {
 }
 async function parseGraphifyEntities(projectRoot) {
   try {
-    const raw = await readFile15(join13(projectRoot, "graphify-out", "graph.json"), "utf-8");
+    const raw = await readFile17(join14(projectRoot, "graphify-out", "graph.json"), "utf-8");
     const graph = JSON.parse(raw);
     const entities = [];
     for (const node2 of graph.nodes ?? []) {
@@ -19366,16 +20407,16 @@ async function parseGraphifyEntities(projectRoot) {
   }
 }
 async function scanSrcComponents(projectRoot) {
-  const { readdir: readdir5 } = await import("node:fs/promises");
+  const { readdir: readdir6 } = await import("node:fs/promises");
   const entities = [];
-  const srcDir = join13(projectRoot, "src");
+  const srcDir = join14(projectRoot, "src");
   async function walk(dir, prefix) {
     try {
-      const entries = await readdir5(dir, { withFileTypes: true });
+      const entries = await readdir6(dir, { withFileTypes: true });
       for (const entry of entries) {
         if (entry.name.startsWith("."))
           continue;
-        const full = join13(dir, entry.name);
+        const full = join14(dir, entry.name);
         if (entry.isDirectory()) {
           if (entry.name === "node_modules")
             continue;
@@ -19400,8 +20441,8 @@ async function scanSrcComponents(projectRoot) {
 var init_source_parsers = () => {};
 
 // src/core/memory/episodic-store.ts
-import { appendFile, mkdir as mkdir10, readFile as readFile16 } from "node:fs/promises";
-import { resolve as resolve17 } from "node:path";
+import { appendFile, mkdir as mkdir10, readFile as readFile18 } from "node:fs/promises";
+import { resolve as resolve18 } from "node:path";
 async function appendEvent(projectRoot, event) {
   try {
     const full = ProductEventSchema.parse({
@@ -19409,7 +20450,7 @@ async function appendEvent(projectRoot, event) {
       id: event.id ?? `evt-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`
     });
     const path = eventsPath(projectRoot);
-    await mkdir10(resolve17(projectRoot, ".codeconductor"), { recursive: true });
+    await mkdir10(resolve18(projectRoot, ".codeconductor"), { recursive: true });
     await appendFile(path, JSON.stringify(full) + `
 `, "utf-8");
     return ok(full);
@@ -19419,7 +20460,7 @@ async function appendEvent(projectRoot, event) {
 }
 async function listEvents(projectRoot, since, type) {
   try {
-    const content = await readFile16(eventsPath(projectRoot), "utf-8");
+    const content = await readFile18(eventsPath(projectRoot), "utf-8");
     const events = [];
     for (const line of content.split(`
 `)) {
@@ -19447,9 +20488,9 @@ var init_episodic_store = __esm(() => {
 
 // src/core/knowledge/ingest-pipeline.ts
 import { createHash as createHash2 } from "node:crypto";
-import { readFile as readFile17 } from "node:fs/promises";
-import { join as join14 } from "node:path";
-import { mkdir as mkdir11, writeFile as writeFile9 } from "node:fs/promises";
+import { readFile as readFile19 } from "node:fs/promises";
+import { join as join15 } from "node:path";
+import { mkdir as mkdir11, writeFile as writeFile10 } from "node:fs/promises";
 async function mapLimit(items, limit, fn) {
   if (items.length === 0)
     return [];
@@ -19469,22 +20510,22 @@ async function mapLimit(items, limit, fn) {
 }
 async function hashFile(path) {
   try {
-    const content = await readFile17(path, "utf-8");
+    const content = await readFile19(path, "utf-8");
     return createHash2("sha256").update(content).digest("hex").slice(0, 16);
   } catch {
     return null;
   }
 }
 async function collectDeferRisks(projectRoot) {
-  const { readdir: readdir5 } = await import("node:fs/promises");
+  const { readdir: readdir6 } = await import("node:fs/promises");
   const files = [];
   async function walk(dir) {
     try {
-      const entries = await readdir5(dir, { withFileTypes: true });
+      const entries = await readdir6(dir, { withFileTypes: true });
       for (const entry of entries) {
         if (entry.name.startsWith(".") || entry.name === "node_modules")
           continue;
-        const full = join14(dir, entry.name);
+        const full = join15(dir, entry.name);
         if (entry.isDirectory()) {
           await walk(full);
         } else if (entry.name.endsWith(".ts")) {
@@ -19493,10 +20534,10 @@ async function collectDeferRisks(projectRoot) {
       }
     } catch {}
   }
-  await walk(join14(projectRoot, "src"));
+  await walk(join15(projectRoot, "src"));
   const perFile = await mapLimit(files, WALK_READ_CONCURRENCY, async (full) => {
     const entities = [];
-    const content = await readFile17(full, "utf-8");
+    const content = await readFile19(full, "utf-8");
     const rel = full.replace(projectRoot + "/", "");
     const deferRe = new RegExp(DEFER_REGEX_SOURCE, "gm");
     let match;
@@ -19555,13 +20596,13 @@ async function parseBacklogEntities(projectRoot) {
   return entities;
 }
 async function parseAdrEntities(projectRoot) {
-  const { readdir: readdir5 } = await import("node:fs/promises");
-  const adrDir = join14(projectRoot, "docs", "adr");
+  const { readdir: readdir6 } = await import("node:fs/promises");
+  const adrDir = join15(projectRoot, "docs", "adr");
   const entities = [];
   try {
-    const files = (await readdir5(adrDir)).filter((file) => file.endsWith(".md"));
+    const files = (await readdir6(adrDir)).filter((file) => file.endsWith(".md"));
     const parsed = await Promise.all(files.map(async (file) => {
-      const adr = await parseAdrFile(join14(adrDir, file));
+      const adr = await parseAdrFile(join15(adrDir, file));
       return adr ? adrToEntities(adr, `docs/adr/${file}`) : [];
     }));
     entities.push(...parsed.flat());
@@ -19653,7 +20694,7 @@ async function runIngest(projectRoot, productName) {
   await saveGraph2(projectRoot, graph);
   const sourceHashes = {};
   for (const src of ["README.md", "BACKLOG.md", "ROADMAP.md"]) {
-    const h = await hashFile(join14(projectRoot, src));
+    const h = await hashFile(join15(projectRoot, src));
     if (h)
       sourceHashes[src] = h;
   }
@@ -19663,8 +20704,8 @@ async function runIngest(projectRoot, productName) {
     lastIngestAt: new Date().toISOString(),
     sourceHashes
   };
-  await mkdir11(join14(projectRoot, ".codeconductor"), { recursive: true });
-  await writeFile9(productMetaPath(projectRoot), JSON.stringify(ProductMetaSchema.parse(meta), null, 2), "utf-8");
+  await mkdir11(join15(projectRoot, ".codeconductor"), { recursive: true });
+  await writeFile10(productMetaPath(projectRoot), JSON.stringify(ProductMetaSchema.parse(meta), null, 2), "utf-8");
   await appendEvent(projectRoot, {
     type: "ingest.completed",
     timestamp: new Date().toISOString(),
@@ -19745,11 +20786,11 @@ var init_ingest_command = __esm(() => {
 });
 
 // src/core/memory/operational-state.ts
-import { mkdir as mkdir12, readFile as readFile18, writeFile as writeFile10 } from "node:fs/promises";
-import { resolve as resolve18 } from "node:path";
+import { mkdir as mkdir12, readFile as readFile20, writeFile as writeFile11 } from "node:fs/promises";
+import { resolve as resolve19 } from "node:path";
 async function loadOperationalState(projectRoot) {
   try {
-    const raw = await readFile18(operationalStatePath(projectRoot), "utf-8");
+    const raw = await readFile20(operationalStatePath(projectRoot), "utf-8");
     return ok(OperationalStateSchema.parse(JSON.parse(raw)));
   } catch (e) {
     if (e.code === "ENOENT") {
@@ -19771,8 +20812,8 @@ async function saveOperationalState(projectRoot, state) {
       updatedAt: new Date().toISOString()
     });
     const path = operationalStatePath(projectRoot);
-    await mkdir12(resolve18(projectRoot, ".codeconductor"), { recursive: true });
-    await writeFile10(path, JSON.stringify(validated, null, 2), "utf-8");
+    await mkdir12(resolve19(projectRoot, ".codeconductor"), { recursive: true });
+    await writeFile11(path, JSON.stringify(validated, null, 2), "utf-8");
     return ok(undefined);
   } catch (e) {
     return err(e instanceof Error ? e : new Error(String(e)));
@@ -19806,11 +20847,11 @@ var init_operational_state = __esm(() => {
 });
 
 // src/core/memory/strategic-memory.ts
-import { mkdir as mkdir13, readFile as readFile19, writeFile as writeFile11 } from "node:fs/promises";
-import { resolve as resolve19 } from "node:path";
+import { mkdir as mkdir13, readFile as readFile21, writeFile as writeFile12 } from "node:fs/promises";
+import { resolve as resolve20 } from "node:path";
 async function loadStrategicMemory(projectRoot) {
   try {
-    const raw = await readFile19(strategicPath(projectRoot), "utf-8");
+    const raw = await readFile21(strategicPath(projectRoot), "utf-8");
     return ok(StrategicMemorySchema.parse(JSON.parse(raw)));
   } catch (e) {
     if (e.code === "ENOENT") {
@@ -19831,8 +20872,8 @@ async function saveStrategicMemory(projectRoot, memory) {
       updatedAt: new Date().toISOString()
     });
     const path = strategicPath(projectRoot);
-    await mkdir13(resolve19(projectRoot, ".codeconductor"), { recursive: true });
-    await writeFile11(path, JSON.stringify(validated, null, 2), "utf-8");
+    await mkdir13(resolve20(projectRoot, ".codeconductor"), { recursive: true });
+    await writeFile12(path, JSON.stringify(validated, null, 2), "utf-8");
     return ok(undefined);
   } catch (e) {
     return err(e instanceof Error ? e : new Error(String(e)));
@@ -19844,8 +20885,8 @@ var init_strategic_memory = __esm(() => {
 });
 
 // src/core/memory/memory-index.ts
-import { mkdir as mkdir14, readFile as readFile20, writeFile as writeFile12 } from "node:fs/promises";
-import { resolve as resolve20 } from "node:path";
+import { mkdir as mkdir14, readFile as readFile22, writeFile as writeFile13 } from "node:fs/promises";
+import { resolve as resolve21 } from "node:path";
 function parseMarkdown(content) {
   const startIdx = content.indexOf(SENTINEL_START);
   const endIdx = content.indexOf(SENTINEL_END);
@@ -19864,8 +20905,8 @@ function parseMarkdown(content) {
 }
 async function loadMemoryIndex(projectRoot) {
   try {
-    const filePath = resolve20(projectRoot, MEMORY_FILE);
-    const content = await readFile20(filePath, "utf-8");
+    const filePath = resolve21(projectRoot, MEMORY_FILE);
+    const content = await readFile22(filePath, "utf-8");
     const parsed = parseMarkdown(content);
     if (!parsed) {
       return err(new Error("Failed to parse memory index from memory.md"));
@@ -19882,28 +20923,28 @@ var init_memory_index = __esm(() => {
 });
 
 // src/core/evaluation/outcome-store.ts
-import { appendFile as appendFile2, mkdir as mkdir15, readFile as readFile21, readdir as readdir5, writeFile as writeFile13 } from "node:fs/promises";
-import { resolve as resolve21 } from "node:path";
+import { appendFile as appendFile2, mkdir as mkdir15, readFile as readFile23, readdir as readdir6, writeFile as writeFile14 } from "node:fs/promises";
+import { resolve as resolve22 } from "node:path";
 async function ensureEvaluationDir(projectRoot) {
-  const dir = resolve21(projectRoot, EVAL_DIR);
+  const dir = resolve22(projectRoot, EVAL_DIR);
   await mkdir15(dir, { recursive: true });
-  await mkdir15(resolve21(dir, SCORECARDS_DIR), { recursive: true });
+  await mkdir15(resolve22(dir, SCORECARDS_DIR), { recursive: true });
   return dir;
 }
 async function appendOutcome(projectRoot, outcome) {
   try {
     const dir = await ensureEvaluationDir(projectRoot);
     const validated = TaskOutcomeSchema.parse(outcome);
-    await appendFile2(resolve21(dir, OUTCOMES_FILE), JSON.stringify(validated) + `
+    await appendFile2(resolve22(dir, OUTCOMES_FILE), JSON.stringify(validated) + `
 `, "utf-8");
-    const indexPath = resolve21(dir, INDEX_FILE);
+    const indexPath = resolve22(dir, INDEX_FILE);
     let index = { version: 1, lastOutcomeId: validated.id };
     try {
-      const raw = await readFile21(indexPath, "utf-8");
+      const raw = await readFile23(indexPath, "utf-8");
       index = EvaluationIndexSchema.parse(JSON.parse(raw));
       index.lastOutcomeId = validated.id;
     } catch {}
-    await writeFile13(indexPath, JSON.stringify(index, null, 2), "utf-8");
+    await writeFile14(indexPath, JSON.stringify(index, null, 2), "utf-8");
     return ok(undefined);
   } catch (e) {
     return err(e instanceof Error ? e : new Error(String(e)));
@@ -19911,8 +20952,8 @@ async function appendOutcome(projectRoot, outcome) {
 }
 async function listOutcomes(projectRoot, filter = {}) {
   try {
-    const path = resolve21(projectRoot, EVAL_DIR, OUTCOMES_FILE);
-    const content = await readFile21(path, "utf-8");
+    const path = resolve22(projectRoot, EVAL_DIR, OUTCOMES_FILE);
+    const content = await readFile23(path, "utf-8");
     const lines = content.split(`
 `).filter((l) => l.trim().length > 0);
     const outcomes = [];
@@ -19950,8 +20991,8 @@ async function saveScorecard(projectRoot, record) {
   try {
     const dir = await ensureEvaluationDir(projectRoot);
     const validated = ScorecardRecordSchema.parse(record);
-    const filePath = resolve21(dir, SCORECARDS_DIR, `${validated.id}.json`);
-    await writeFile13(filePath, JSON.stringify(validated, null, 2), "utf-8");
+    const filePath = resolve22(dir, SCORECARDS_DIR, `${validated.id}.json`);
+    await writeFile14(filePath, JSON.stringify(validated, null, 2), "utf-8");
     return ok(filePath);
   } catch (e) {
     return err(e instanceof Error ? e : new Error(String(e)));
@@ -19959,10 +21000,10 @@ async function saveScorecard(projectRoot, record) {
 }
 async function listScorecards(projectRoot, filter = {}) {
   try {
-    const dir = resolve21(projectRoot, EVAL_DIR, SCORECARDS_DIR);
+    const dir = resolve22(projectRoot, EVAL_DIR, SCORECARDS_DIR);
     let files;
     try {
-      files = await readdir5(dir);
+      files = await readdir6(dir);
     } catch (e) {
       if (e.code === "ENOENT")
         return ok([]);
@@ -19972,7 +21013,7 @@ async function listScorecards(projectRoot, filter = {}) {
     for (const file of files) {
       if (!file.endsWith(".json"))
         continue;
-      const parsed = ScorecardRecordSchema.parse(JSON.parse(await readFile21(resolve21(dir, file), "utf-8")));
+      const parsed = ScorecardRecordSchema.parse(JSON.parse(await readFile23(resolve22(dir, file), "utf-8")));
       if (filter.backlogId && parsed.backlogId !== filter.backlogId)
         continue;
       if (filter.verdict && parsed.verdict !== filter.verdict)
@@ -19991,8 +21032,8 @@ async function hasPassingScorecard(projectRoot, backlogId) {
 }
 async function loadScorecard(projectRoot, id) {
   try {
-    const filePath = resolve21(projectRoot, EVAL_DIR, SCORECARDS_DIR, `${id}.json`);
-    const content = await readFile21(filePath, "utf-8");
+    const filePath = resolve22(projectRoot, EVAL_DIR, SCORECARDS_DIR, `${id}.json`);
+    const content = await readFile23(filePath, "utf-8");
     return ok(ScorecardRecordSchema.parse(JSON.parse(content)));
   } catch (e) {
     return err(e instanceof Error ? e : new Error(String(e)));
@@ -20083,11 +21124,11 @@ var init_outcome_store = __esm(() => {
 });
 
 // src/core/feedback/feedback-ingestor.ts
-import { readFile as readFile22 } from "node:fs/promises";
-import { join as join15 } from "node:path";
+import { readFile as readFile24 } from "node:fs/promises";
+import { join as join16 } from "node:path";
 async function parseChangelogLearnings(projectRoot) {
   try {
-    const content = await readFile22(join15(projectRoot, "CHANGELOG.md"), "utf-8");
+    const content = await readFile24(join16(projectRoot, "CHANGELOG.md"), "utf-8");
     const unreleased = content.match(/## \[Unreleased\]([\s\S]*?)(?=## \[|\n## )/i);
     if (!unreleased)
       return [];
@@ -20207,7 +21248,7 @@ var exports_product_command = {};
 __export(exports_product_command, {
   productCommand: () => productCommand
 });
-import { writeFile as writeFile14 } from "node:fs/promises";
+import { writeFile as writeFile15 } from "node:fs/promises";
 async function productCommand(options) {
   const { subcommand, projectRoot, output, query, from, to, since, format } = options;
   try {
@@ -20410,7 +21451,7 @@ async function handleExport(projectRoot, format, output) {
     ...queryNodes(graph.data, "risk").map((n) => `- ${n.name}`)
   ].join(`
 `);
-  await writeFile14(productReportPath(projectRoot), md, "utf-8");
+  await writeFile15(productReportPath(projectRoot), md, "utf-8");
   return {
     code: 0,
     data: {
@@ -20613,8 +21654,8 @@ async function runCompileCheck(options) {
   })();
   collectOutput.catch(() => {});
   let timeoutId;
-  const timeout = new Promise((resolve22) => {
-    timeoutId = setTimeout(() => resolve22("timeout"), timeoutMs);
+  const timeout = new Promise((resolve23) => {
+    timeoutId = setTimeout(() => resolve23("timeout"), timeoutMs);
   });
   try {
     const outcome = await Promise.race([collectOutput, timeout]);
@@ -20684,9 +21725,9 @@ var init_compile_checker = __esm(() => {
 
 // src/core/verification/verification-runner.ts
 import { existsSync as existsSync3 } from "node:fs";
-import { readFile as readFile23 } from "node:fs/promises";
-import { dirname as dirname6, join as join16, resolve as resolve22 } from "node:path";
-import { mkdir as mkdir16, readdir as readdir6, writeFile as writeFile15 } from "node:fs/promises";
+import { readFile as readFile25 } from "node:fs/promises";
+import { dirname as dirname8, join as join17, resolve as resolve23 } from "node:path";
+import { mkdir as mkdir16, readdir as readdir7, writeFile as writeFile16 } from "node:fs/promises";
 function isPassingEvidence(ev) {
   switch (ev.type) {
     case "verification":
@@ -20704,8 +21745,8 @@ function isPassingEvidence(ev) {
   }
 }
 function evidenceFilePath(evDir, id) {
-  const path = resolve22(evDir, `${id.replace(/[^A-Za-z0-9_-]/g, "_")}.json`);
-  if (dirname6(path) !== resolve22(evDir)) {
+  const path = resolve23(evDir, `${id.replace(/[^A-Za-z0-9_-]/g, "_")}.json`);
+  if (dirname8(path) !== resolve23(evDir)) {
     return err(new Error(`Refusing to write evidence for "${id}" outside ${evDir}`));
   }
   return ok(path);
@@ -20717,7 +21758,7 @@ async function persistEvidence(projectRoot, evidence) {
     return evidencePath;
   try {
     await mkdir16(evDir, { recursive: true });
-    await writeFile15(evidencePath.data, JSON.stringify(evidence, null, 2), "utf-8");
+    await writeFile16(evidencePath.data, JSON.stringify(evidence, null, 2), "utf-8");
   } catch (e) {
     return err(e instanceof Error ? e : new Error(String(e)));
   }
@@ -20731,7 +21772,7 @@ async function collectTaskEvidence(projectRoot, taskId) {
     return ok({ records, invalid });
   let files;
   try {
-    files = await readdir6(evDir);
+    files = await readdir7(evDir);
   } catch (e) {
     return err(e instanceof Error ? e : new Error(String(e)));
   }
@@ -20739,7 +21780,7 @@ async function collectTaskEvidence(projectRoot, taskId) {
     if (!file.endsWith(".json"))
       continue;
     try {
-      const raw = await readFile23(join16(evDir, file), "utf-8");
+      const raw = await readFile25(join17(evDir, file), "utf-8");
       const ev = EvidenceSchema.parse(JSON.parse(raw));
       if (ev.relatedTask === taskId)
         records.push(ev);
@@ -22290,9 +23331,9 @@ var init_output_validator = __esm(() => {
 
 // src/core/ccep/command-parser.ts
 import { existsSync as existsSync4, readFileSync as readFileSync3 } from "node:fs";
-import { join as join17 } from "node:path";
+import { join as join18 } from "node:path";
 function readProjectId(projectRoot) {
-  const packageJsonPath = join17(projectRoot, "package.json");
+  const packageJsonPath = join18(projectRoot, "package.json");
   if (existsSync4(packageJsonPath)) {
     try {
       const pkg = JSON.parse(readFileSync3(packageJsonPath, "utf-8"));
@@ -22322,7 +23363,7 @@ function parseCommand(command, userRequest, projectRoot) {
       maxVariance: "low"
     }
   };
-  const packageJsonPath = join17(projectRoot, "package.json");
+  const packageJsonPath = join18(projectRoot, "package.json");
   if (existsSync4(packageJsonPath)) {
     try {
       const pkg = JSON.parse(readFileSync3(packageJsonPath, "utf-8"));
@@ -22396,8 +23437,8 @@ var init_workflow_profile_loader = __esm(() => {
 // src/core/evaluation/harness-catalog.ts
 import { createHash as createHash3 } from "node:crypto";
 import { existsSync as existsSync5, readFileSync as readFileSync4 } from "node:fs";
-import { copyFile as copyFile2, mkdir as mkdir17, readFile as readFile24, readdir as readdir7, rm as rm2, writeFile as writeFile16 } from "node:fs/promises";
-import { dirname as dirname7, join as join18, resolve as resolve23 } from "node:path";
+import { copyFile as copyFile2, mkdir as mkdir17, readFile as readFile26, readdir as readdir8, rm as rm3, writeFile as writeFile17 } from "node:fs/promises";
+import { dirname as dirname9, join as join19, resolve as resolve24 } from "node:path";
 function catalogIds(catalog = DEFAULT_HARNESS_CATALOG) {
   return catalog.components.map((c) => c.id);
 }
@@ -22450,20 +23491,20 @@ function harnessFingerprint(disabled, contractVersion, ccepProfile = "feature",
   return createHash3("sha256").update(JSON.stringify(payload)).digest("hex").slice(0, 16);
 }
 async function loadHarnessCatalog(projectRoot) {
-  const overridePath = resolve23(projectRoot, EVAL_DIR2, CATALOG_FILE);
+  const overridePath = resolve24(projectRoot, EVAL_DIR2, CATALOG_FILE);
   try {
-    const raw = await readFile24(overridePath, "utf-8");
+    const raw = await readFile26(overridePath, "utf-8");
     return HarnessCatalogSchema.parse($parse(raw));
   } catch {
     return DEFAULT_HARNESS_CATALOG;
   }
 }
 function activeOverlayPath(projectRoot) {
-  return resolve23(projectRoot, EVAL_DIR2, ACTIVE_OVERLAY_FILE);
+  return resolve24(projectRoot, EVAL_DIR2, ACTIVE_OVERLAY_FILE);
 }
 async function readActiveOverlay(projectRoot) {
   try {
-    const raw = await readFile24(activeOverlayPath(projectRoot), "utf-8");
+    const raw = await readFile26(activeOverlayPath(projectRoot), "utf-8");
     return HarnessOverlaySchema.parse($parse(raw));
   } catch {
     return null;
@@ -22517,55 +23558,55 @@ function applyCatalogToProfile(profile, disabled) {
   return next;
 }
 async function restoreOverlayBackup(projectRoot) {
-  const backupRoot = resolve23(projectRoot, EVAL_DIR2, OVERLAY_BACKUP_DIR);
+  const backupRoot = resolve24(projectRoot, EVAL_DIR2, OVERLAY_BACKUP_DIR);
   if (!existsSync5(backupRoot))
     return;
-  const configBackup = join18(backupRoot, "config.yml");
-  const configDest = resolve23(projectRoot, ".codeconductor", "config.yml");
+  const configBackup = join19(backupRoot, "config.yml");
+  const configDest = resolve24(projectRoot, ".codeconductor", "config.yml");
   if (existsSync5(configBackup)) {
-    await mkdir17(dirname7(configDest), { recursive: true });
+    await mkdir17(dirname9(configDest), { recursive: true });
     await copyFile2(configBackup, configDest);
   }
-  const workflowsBackup = join18(backupRoot, "workflows");
-  const workflowsDest = resolve23(projectRoot, ".codeconductor", "workflows");
+  const workflowsBackup = join19(backupRoot, "workflows");
+  const workflowsDest = resolve24(projectRoot, ".codeconductor", "workflows");
   if (existsSync5(workflowsBackup)) {
     await mkdir17(workflowsDest, { recursive: true });
-    const files = await readdir7(workflowsBackup);
+    const files = await readdir8(workflowsBackup);
     for (const file of files) {
-      await copyFile2(join18(workflowsBackup, file), join18(workflowsDest, file));
+      await copyFile2(join19(workflowsBackup, file), join19(workflowsDest, file));
     }
   }
-  const overlayBackup = join18(backupRoot, ACTIVE_OVERLAY_FILE);
+  const overlayBackup = join19(backupRoot, ACTIVE_OVERLAY_FILE);
   const overlayDest = activeOverlayPath(projectRoot);
   if (existsSync5(overlayBackup)) {
     await copyFile2(overlayBackup, overlayDest);
   } else if (existsSync5(overlayDest)) {
-    await rm2(overlayDest, { force: true });
+    await rm3(overlayDest, { force: true });
   }
 }
 async function snapshotForBackup(projectRoot) {
-  const backupRoot = resolve23(projectRoot, EVAL_DIR2, OVERLAY_BACKUP_DIR);
+  const backupRoot = resolve24(projectRoot, EVAL_DIR2, OVERLAY_BACKUP_DIR);
   if (existsSync5(backupRoot))
     return;
   await mkdir17(backupRoot, { recursive: true });
-  const configPath = resolve23(projectRoot, ".codeconductor", "config.yml");
+  const configPath = resolve24(projectRoot, ".codeconductor", "config.yml");
   if (existsSync5(configPath)) {
-    await copyFile2(configPath, join18(backupRoot, "config.yml"));
+    await copyFile2(configPath, join19(backupRoot, "config.yml"));
   }
-  const workflowsDir = resolve23(projectRoot, ".codeconductor", "workflows");
+  const workflowsDir = resolve24(projectRoot, ".codeconductor", "workflows");
   if (existsSync5(workflowsDir)) {
-    const dest = join18(backupRoot, "workflows");
+    const dest = join19(backupRoot, "workflows");
     await mkdir17(dest, { recursive: true });
-    const files = await readdir7(workflowsDir);
+    const files = await readdir8(workflowsDir);
     for (const file of files) {
       if (file.endsWith(".yml")) {
-        await copyFile2(join18(workflowsDir, file), join18(dest, file));
+        await copyFile2(join19(workflowsDir, file), join19(dest, file));
       }
     }
   }
   const overlay = activeOverlayPath(projectRoot);
   if (existsSync5(overlay)) {
-    await copyFile2(overlay, join18(backupRoot, ACTIVE_OVERLAY_FILE));
+    await copyFile2(overlay, join19(backupRoot, ACTIVE_OVERLAY_FILE));
   }
 }
 async function applyHarnessOverlay(projectRoot, disabled, options = {}) {
@@ -22574,13 +23615,13 @@ async function applyHarnessOverlay(projectRoot, disabled, options = {}) {
       await restoreOverlayBackup(projectRoot);
       await snapshotForBackup(projectRoot);
     }
-    const workflowsDir = resolve23(projectRoot, ".codeconductor", "workflows");
+    const workflowsDir = resolve24(projectRoot, ".codeconductor", "workflows");
     await mkdir17(workflowsDir, { recursive: true });
-    await mkdir17(resolve23(projectRoot, EVAL_DIR2), { recursive: true });
+    await mkdir17(resolve24(projectRoot, EVAL_DIR2), { recursive: true });
     for (const command of WORKFLOW_OVERLAY_COMMANDS) {
       const base = loadWorkflowProfile(command);
       const next = applyCatalogToProfile(base, disabled);
-      await writeFile16(join18(workflowsDir, `${command}.yml`), $stringify(next), "utf-8");
+      await writeFile17(join19(workflowsDir, `${command}.yml`), $stringify(next), "utf-8");
     }
     const needsConfig = disabled.includes("compile_loop") || disabled.includes("council");
     if (needsConfig) {
@@ -22608,7 +23649,7 @@ async function applyHarnessOverlay(projectRoot, disabled, options = {}) {
       contractVersion: options.contractVersion,
       ccepProfile: options.ccepProfile ?? "feature"
     });
-    await writeFile16(activeOverlayPath(projectRoot), $stringify(overlay), "utf-8");
+    await writeFile17(activeOverlayPath(projectRoot), $stringify(overlay), "utf-8");
     return ok(overlay);
   } catch (e) {
     return err(e instanceof Error ? e : new Error(String(e)));
@@ -22720,8 +23761,8 @@ var init_harness_catalog = __esm(() => {
 
 // src/core/ccep/context-resolver.ts
 import { existsSync as existsSync6 } from "node:fs";
-import { readFile as readFile25 } from "node:fs/promises";
-import { join as join19 } from "node:path";
+import { readFile as readFile27 } from "node:fs/promises";
+import { join as join20 } from "node:path";
 async function loadProductKnowledge(projectRoot) {
   if (isProductGraphDisabled(projectRoot)) {
     return {};
@@ -22731,7 +23772,7 @@ async function loadProductKnowledge(projectRoot) {
     return {};
   }
   try {
-    const raw = await readFile25(graphPath, "utf-8");
+    const raw = await readFile27(graphPath, "utf-8");
     const graph = ProductGraphSchema.parse(JSON.parse(raw));
     return {
       productName: graph.productName,
@@ -22747,7 +23788,7 @@ async function loadProductKnowledge(projectRoot) {
 }
 async function resolveAstSource(projectRoot) {
   if (isProductGraphDisabled(projectRoot)) {
-    const graphifyPath2 = join19(projectRoot, "graphify-out", "graph.json");
+    const graphifyPath2 = join20(projectRoot, "graphify-out", "graph.json");
     if (existsSync6(graphifyPath2)) {
       return { source: "graphify", confidence: "medium" };
     }
@@ -22757,7 +23798,7 @@ async function resolveAstSource(projectRoot) {
   if (existsSync6(graphPath)) {
     return { source: "product-graph", confidence: "high" };
   }
-  const graphifyPath = join19(projectRoot, "graphify-out", "graph.json");
+  const graphifyPath = join20(projectRoot, "graphify-out", "graph.json");
   if (existsSync6(graphifyPath)) {
     return { source: "graphify", confidence: "medium" };
   }
@@ -23795,8 +24836,8 @@ var init_backlog_validator = __esm(() => {
 
 // src/core/openspec/openspec-state.ts
 import { createHash as createHash4 } from "node:crypto";
-import { mkdir as mkdir18, readFile as readFile26, rename as rename2, writeFile as writeFile17 } from "node:fs/promises";
-import { resolve as resolve24 } from "node:path";
+import { mkdir as mkdir18, readFile as readFile28, rename as rename2, writeFile as writeFile18 } from "node:fs/promises";
+import { resolve as resolve25 } from "node:path";
 function canTransition(from, to) {
   return ALLOWED_TRANSITIONS[from]?.includes(to) ?? false;
 }
@@ -23817,13 +24858,13 @@ function applyBacklogTransition(content, itemId, from, to, progress) {
 }
 async function writeFileAtomic(path, content) {
   const tmp = `${path}.${process.pid}.${Date.now()}.tmp`;
-  await writeFile17(tmp, content, "utf-8");
+  await writeFile18(tmp, content, "utf-8");
   await rename2(tmp, path);
 }
 async function loadOpenspecState(projectRoot) {
   try {
-    const filePath = resolve24(projectRoot, STATE_FILE);
-    const content = await readFile26(filePath, "utf-8");
+    const filePath = resolve25(projectRoot, STATE_FILE);
+    const content = await readFile28(filePath, "utf-8");
     const data = JSON.parse(content);
     return ok(OpenspecStateSchema.parse(data));
   } catch (e) {
@@ -23840,10 +24881,10 @@ async function loadOpenspecState(projectRoot) {
 }
 async function writeOpenspecState(projectRoot, state) {
   try {
-    const dir = resolve24(projectRoot, ".codeconductor");
+    const dir = resolve25(projectRoot, ".codeconductor");
     await mkdir18(dir, { recursive: true });
     const validated = OpenspecStateSchema.parse(state);
-    await writeFileAtomic(resolve24(dir, "openspec-state.json"), JSON.stringify(validated, null, 2));
+    await writeFileAtomic(resolve25(dir, "openspec-state.json"), JSON.stringify(validated, null, 2));
     return ok(undefined);
   } catch (e) {
     return err(e instanceof Error ? e : new Error(String(e)));
@@ -23948,8 +24989,8 @@ var init_openspec_state = __esm(() => {
 
 // src/core/openspec/backlog-scanner.ts
 import { execFileSync as execFileSync2 } from "node:child_process";
-import { readFile as readFile27 } from "node:fs/promises";
-import { resolve as resolve25 } from "node:path";
+import { readFile as readFile29 } from "node:fs/promises";
+import { resolve as resolve26 } from "node:path";
 function itemSnapshot(items) {
   const snap = {};
   for (const item of items) {
@@ -23959,8 +25000,8 @@ function itemSnapshot(items) {
 }
 async function scanBacklog(projectRoot, previousSnapshot = {}) {
   try {
-    const filePath = resolve25(projectRoot, BACKLOG_FILENAME);
-    const content = await readFile27(filePath, "utf-8");
+    const filePath = resolve26(projectRoot, BACKLOG_FILENAME);
+    const content = await readFile29(filePath, "utf-8");
     const hash = hashContent(content);
     let fileChanged = true;
     try {
@@ -24197,8 +25238,8 @@ var init_backlog_planner = __esm(() => {
 });
 
 // src/core/openspec/openspec-generator.ts
-import { mkdir as mkdir19, rename as rename3, writeFile as writeFile18 } from "node:fs/promises";
-import { basename as basename3, resolve as resolve26 } from "node:path";
+import { mkdir as mkdir19, rename as rename3, writeFile as writeFile19 } from "node:fs/promises";
+import { basename as basename5, resolve as resolve27 } from "node:path";
 function pad3(n) {
   return String(n).padStart(3, "0");
 }
@@ -24274,8 +25315,8 @@ ${blocks.join(`
 `;
 }
 async function writeTasksMarkdown(projectRoot, changePath, cards, options = {}) {
-  await mkdir19(resolve26(projectRoot, changePath), { recursive: true });
-  await writeFile18(resolve26(projectRoot, changePath, "tasks.md"), tasksContent(cards, options), "utf-8");
+  await mkdir19(resolve27(projectRoot, changePath), { recursive: true });
+  await writeFile19(resolve27(projectRoot, changePath, "tasks.md"), tasksContent(cards, options), "utf-8");
 }
 function tasksContent(cards, options = {}) {
   const criteria = options.acceptanceCriteria ?? [];
@@ -24320,38 +25361,38 @@ function tasksContent(cards, options = {}) {
 }
 async function generateOpenspecChange(projectRoot, item, taskCards, options = {}) {
   const slug = buildChangeSlug(item);
-  const changeDir = resolve26(projectRoot, "openspec", "changes", slug);
-  await mkdir19(resolve26(changeDir, "specs"), { recursive: true });
+  const changeDir = resolve27(projectRoot, "openspec", "changes", slug);
+  await mkdir19(resolve27(changeDir, "specs"), { recursive: true });
   const taskOpts = {
     tddRequired: options.tddRequired,
     acceptanceCriteria: options.acceptanceCriteria ?? item.acceptanceCriteria
   };
-  await writeFile18(resolve26(changeDir, "proposal.md"), proposalContent(item), "utf-8");
-  await writeFile18(resolve26(changeDir, "design.md"), designContent(item), "utf-8");
-  await writeFile18(resolve26(changeDir, "tasks.md"), tasksContent(taskCards, taskOpts), "utf-8");
-  await writeFile18(resolve26(changeDir, "specs", "delta.md"), specDelta(item), "utf-8");
+  await writeFile19(resolve27(changeDir, "proposal.md"), proposalContent(item), "utf-8");
+  await writeFile19(resolve27(changeDir, "design.md"), designContent(item), "utf-8");
+  await writeFile19(resolve27(changeDir, "tasks.md"), tasksContent(taskCards, taskOpts), "utf-8");
+  await writeFile19(resolve27(changeDir, "specs", "delta.md"), specDelta(item), "utf-8");
   return `openspec/changes/${slug}`;
 }
 async function archiveChangeFolder(projectRoot, changePath) {
-  const src = resolve26(projectRoot, changePath);
-  const slug = basename3(changePath);
-  const destDir = resolve26(projectRoot, "openspec", "changes", "archive");
+  const src = resolve27(projectRoot, changePath);
+  const slug = basename5(changePath);
+  const destDir = resolve27(projectRoot, "openspec", "changes", "archive");
   await mkdir19(destDir, { recursive: true });
-  const dest = resolve26(destDir, slug);
+  const dest = resolve27(destDir, slug);
   await rename3(src, dest);
   return `openspec/changes/archive/${slug}`;
 }
 async function ensureOpenspecConfig(projectRoot) {
-  const configPath = resolve26(projectRoot, "openspec", "config.yaml");
+  const configPath = resolve27(projectRoot, "openspec", "config.yaml");
   try {
     const { access: access7 } = await import("node:fs/promises");
     await access7(configPath);
   } catch {
-    await mkdir19(resolve26(projectRoot, "openspec"), { recursive: true });
+    await mkdir19(resolve27(projectRoot, "openspec"), { recursive: true });
     const stub = `# OpenSpec project config (CodeConductor native compatible)
 schema: spec-driven
 `;
-    await writeFile18(configPath, stub, "utf-8");
+    await writeFile19(configPath, stub, "utf-8");
   }
 }
 var init_openspec_generator = __esm(() => {
@@ -24359,8 +25400,8 @@ var init_openspec_generator = __esm(() => {
 });
 
 // src/core/openspec/spec-quality.ts
-import { readdir as readdir8, readFile as readFile28 } from "node:fs/promises";
-import { join as join20, relative as relative5, resolve as resolve27 } from "node:path";
+import { readdir as readdir9, readFile as readFile30 } from "node:fs/promises";
+import { join as join21, relative as relative5, resolve as resolve28 } from "node:path";
 function uniqueIds(matches) {
   return [...new Set(matches ?? [])];
 }
@@ -24477,12 +25518,12 @@ async function walkMarkdown(dir) {
   const out = [];
   let entries;
   try {
-    entries = await readdir8(dir, { withFileTypes: true });
+    entries = await readdir9(dir, { withFileTypes: true });
   } catch {
     return out;
   }
   for (const entry of entries) {
-    const full = join20(dir, entry.name);
+    const full = join21(dir, entry.name);
     if (entry.isDirectory()) {
       out.push(...await walkMarkdown(full));
     } else if (entry.isFile() && entry.name.endsWith(".md")) {
@@ -24492,8 +25533,8 @@ async function walkMarkdown(dir) {
   return out;
 }
 async function assessChangeFolder(projectRoot, changePath) {
-  const root = resolve27(projectRoot);
-  const changeRoot = resolve27(root, changePath);
+  const root = resolve28(projectRoot);
+  const changeRoot = resolve28(root, changePath);
   if (!changeRoot.startsWith(root)) {
     return {
       valid: false,
@@ -24511,18 +25552,18 @@ async function assessChangeFolder(projectRoot, changePath) {
       successCriteria: []
     };
   }
-  const specDir = join20(changeRoot, "specs");
+  const specDir = join21(changeRoot, "specs");
   const specFiles = await walkMarkdown(specDir);
-  const extra = ["proposal.md", "design.md"].map((name) => join20(changeRoot, name));
+  const extra = ["proposal.md", "design.md"].map((name) => join21(changeRoot, name));
   const reports = [];
   for (const file of specFiles) {
-    const content = await readFile28(file, "utf-8");
+    const content = await readFile30(file, "utf-8");
     reports.push(assessSpecMarkdown(content, relative5(root, file).replace(/\\/g, "/")));
   }
   for (const file of extra) {
     let content;
     try {
-      content = await readFile28(file, "utf-8");
+      content = await readFile30(file, "utf-8");
     } catch {
       continue;
     }
@@ -24577,8 +25618,8 @@ var init_spec_quality = __esm(() => {
 });
 
 // src/core/openspec/spec-analyzer.ts
-import { readFile as readFile29 } from "node:fs/promises";
-import { join as join21, resolve as resolve28 } from "node:path";
+import { readFile as readFile31 } from "node:fs/promises";
+import { join as join22, resolve as resolve29 } from "node:path";
 function unique(ids) {
   return [...new Set(ids)];
 }
@@ -24673,23 +25714,23 @@ function analyzeSpecArtifacts(input) {
   };
 }
 async function analyzeChangeFolder(projectRoot, changePath, options) {
-  const changeRoot = resolve28(projectRoot, changePath);
-  const specPath = join21(changeRoot, "specs", "delta.md");
+  const changeRoot = resolve29(projectRoot, changePath);
+  const specPath = join22(changeRoot, "specs", "delta.md");
   let specMarkdown = "";
   try {
-    specMarkdown = await readFile29(specPath, "utf-8");
+    specMarkdown = await readFile31(specPath, "utf-8");
   } catch {
     specMarkdown = "";
   }
   let tasksMarkdown = "";
   try {
-    tasksMarkdown = await readFile29(join21(changeRoot, "tasks.md"), "utf-8");
+    tasksMarkdown = await readFile31(join22(changeRoot, "tasks.md"), "utf-8");
   } catch {
     tasksMarkdown = "";
   }
   let designMarkdown;
   try {
-    designMarkdown = await readFile29(join21(changeRoot, "design.md"), "utf-8");
+    designMarkdown = await readFile31(join22(changeRoot, "design.md"), "utf-8");
   } catch {
     designMarkdown = undefined;
   }
@@ -24712,8 +25753,8 @@ var exports_openspec_command = {};
 __export(exports_openspec_command, {
   openspecCommand: () => openspecCommand
 });
-import { readFile as readFile30 } from "node:fs/promises";
-import { resolve as resolve29 } from "node:path";
+import { readFile as readFile32 } from "node:fs/promises";
+import { resolve as resolve30 } from "node:path";
 async function openspecCommand(options) {
   const { subcommand, itemId, projectRoot, output, reason } = options;
   switch (subcommand) {
@@ -24757,7 +25798,7 @@ function fail(command, errors3, extra = {}) {
   };
 }
 async function persistBacklog(projectRoot, content) {
-  await writeFileAtomic(resolve29(projectRoot, BACKLOG_FILENAME), content);
+  await writeFileAtomic(resolve30(projectRoot, BACKLOG_FILENAME), content);
 }
 async function persistState(projectRoot, state) {
   const written = await writeOpenspecState(projectRoot, state);
@@ -24767,7 +25808,7 @@ async function persistState(projectRoot, state) {
   return { ok: true };
 }
 async function readBacklogMarkdown(projectRoot) {
-  return readFile30(resolve29(projectRoot, BACKLOG_FILENAME), "utf-8");
+  return readFile32(resolve30(projectRoot, BACKLOG_FILENAME), "utf-8");
 }
 async function transitionItem(projectRoot, item, to, progress) {
   const content = await readBacklogMarkdown(projectRoot);
@@ -24965,7 +26006,7 @@ async function handleAnalyze(projectRoot, itemId) {
   const policyParts = [];
   for (const name of ["AGENTS.md", "BACKLOG.md"]) {
     try {
-      policyParts.push(await readFile30(resolve29(projectRoot, name), "utf-8"));
+      policyParts.push(await readFile32(resolve30(projectRoot, name), "utf-8"));
     } catch {}
   }
   const cards = itemCards(stateResult.data, targetId);
@@ -25479,7 +26520,7 @@ __export(exports_hook_command, {
 });
 import { spawnSync } from "node:child_process";
 import { existsSync as existsSync7 } from "node:fs";
-import { resolve as resolve30 } from "node:path";
+import { resolve as resolve31 } from "node:path";
 function detectFormat(explicit, stdinText) {
   if (explicit)
     return explicit;
@@ -25506,8 +26547,8 @@ function resolvePreToolInput(options, stdinText) {
   };
 }
 async function sessionLines(projectRoot) {
-  const backlogPath = resolve30(projectRoot, "BACKLOG.md");
-  const profilePath = resolve30(projectRoot, ".codeconductor", "evaluation", "execution-profile.yml");
+  const backlogPath = resolve31(projectRoot, "BACKLOG.md");
+  const profilePath = resolve31(projectRoot, ".codeconductor", "evaluation", "execution-profile.yml");
   return [
     "[CodeConductor] Session start",
     "Skills: openspec, backlog, evaluation, testing-tdd — invoke via /cc-* then CLI.",
@@ -25585,7 +26626,7 @@ var init_scorecard_constants = __esm(() => {
     { id: "minimal_diff", label: "Minimal diff (no scope creep)", weight: 0.2 },
     { id: "tests", label: "Tests present and passing", weight: 0.15 },
     { id: "regressions", label: "No regressions introduced", weight: 0.15 },
-    { id: "conventions", label: "Code follows project conventions", weight: 0.1 },
+    { id: "conventions", label: "Code follows project conventions", weight: 0.05 },
     { id: "documentation", label: "Documentation updated if required", weight: 0.05 },
     { id: "context_discipline", label: "Context discipline", weight: 0.05 },
     { id: "cc_gain", label: "Complexity diffusion (cc-gain)", weight: 0.05 }
@@ -25979,12 +27020,20 @@ function collectScorecardSignals(projectRoot, scopeFiles, extra) {
   const overrides = {};
   const scopeViolationCount = extra?.scopeViolationCount;
   if (scopeViolationCount && scopeViolationCount > 0) {
-    overrides.scope = { score: 0, notes: `Found ${scopeViolationCount} scope violations`, autoSuggested: true };
+    overrides.minimal_diff = {
+      score: 0,
+      notes: `Found ${scopeViolationCount} scope violations`,
+      autoSuggested: true
+    };
     findings.push(`Scope violation: ${scopeViolationCount} files outside scope.`);
   }
   const hashMismatch = extra?.hashMismatch;
   if (hashMismatch) {
-    overrides.tests = { score: 0, notes: "Test tampering detected (hash mismatch)", autoSuggested: true };
+    overrides.tests = {
+      score: 0,
+      notes: "Test tampering detected (hash mismatch)",
+      autoSuggested: true
+    };
     findings.push("Test tampering detected via test-freeze hash mismatch.");
   }
   let diff = "";
@@ -25999,7 +27048,9 @@ function collectScorecardSignals(projectRoot, scopeFiles, extra) {
     return { criteriaOverrides: overrides, findings, scopeViolationCount, hashMismatch };
   }
   if (!diff.trim()) {
-    overrides.minimal_diff = { score: 2, notes: "No diff detected", autoSuggested: true };
+    if (!overrides.minimal_diff) {
+      overrides.minimal_diff = { score: 2, notes: "No diff detected", autoSuggested: true };
+    }
     return { criteriaOverrides: overrides, findings, scopeViolationCount, hashMismatch };
   }
   const changedFiles = new Set;
@@ -26018,7 +27069,7 @@ function collectScorecardSignals(projectRoot, scopeFiles, extra) {
         autoSuggested: true
       };
       findings.push(`Scope creep detected in ${outOfScope.length} file(s).`);
-    } else {
+    } else if (!overrides.minimal_diff) {
       overrides.minimal_diff = { score: 2, notes: "Diff within declared scope", autoSuggested: true };
     }
   }
@@ -26082,24 +27133,24 @@ var init_scorecard_signals = __esm(() => {
 
 // src/core/evaluation/harness-experiment.ts
 import { existsSync as existsSync8 } from "node:fs";
-import { cp, mkdir as mkdir20, readFile as readFile31, readdir as readdir9, writeFile as writeFile19 } from "node:fs/promises";
-import { dirname as dirname8, join as join22, resolve as resolve31 } from "node:path";
+import { cp, mkdir as mkdir20, readFile as readFile33, readdir as readdir10, writeFile as writeFile20 } from "node:fs/promises";
+import { dirname as dirname10, join as join23, resolve as resolve32 } from "node:path";
 function experimentDir(projectRoot, experimentId) {
-  return resolve31(projectRoot, EVAL_DIR2, EXPERIMENTS_DIR, experimentId);
+  return resolve32(projectRoot, EVAL_DIR2, EXPERIMENTS_DIR, experimentId);
 }
 function experimentYamlPath(projectRoot, experimentId) {
-  return join22(experimentDir(projectRoot, experimentId), "experiment.yml");
+  return join23(experimentDir(projectRoot, experimentId), "experiment.yml");
 }
 async function loadHarnessSuite(projectRoot, suiteId, suitePath) {
   const candidates = suitePath ? [suitePath] : [
-    resolve31(projectRoot, "eval", "suites", suiteId, "suite.yml"),
-    resolve31(projectRoot, EVAL_DIR2, "suites", suiteId, "suite.yml")
+    resolve32(projectRoot, "eval", "suites", suiteId, "suite.yml"),
+    resolve32(projectRoot, EVAL_DIR2, "suites", suiteId, "suite.yml")
   ];
   for (const path of candidates) {
     if (!existsSync8(path))
       continue;
     try {
-      const suite = HarnessSuiteSchema.parse($parse(await readFile31(path, "utf-8")));
+      const suite = HarnessSuiteSchema.parse($parse(await readFile33(path, "utf-8")));
       return ok({ ...suite, path });
     } catch (e) {
       return err(e instanceof Error ? e : new Error(String(e)));
@@ -26109,7 +27160,7 @@ async function loadHarnessSuite(projectRoot, suiteId, suitePath) {
 }
 async function loadExperiment(projectRoot, experimentId) {
   try {
-    const raw = await readFile31(experimentYamlPath(projectRoot, experimentId), "utf-8");
+    const raw = await readFile33(experimentYamlPath(projectRoot, experimentId), "utf-8");
     return ok(HarnessExperimentSchema.parse($parse(raw)));
   } catch (e) {
     if (e.code === "ENOENT") {
@@ -26119,10 +27170,10 @@ async function loadExperiment(projectRoot, experimentId) {
   }
 }
 async function listExperiments(projectRoot) {
-  const root = resolve31(projectRoot, EVAL_DIR2, EXPERIMENTS_DIR);
+  const root = resolve32(projectRoot, EVAL_DIR2, EXPERIMENTS_DIR);
   if (!existsSync8(root))
     return [];
-  const ids = await readdir9(root);
+  const ids = await readdir10(root);
   const experiments = [];
   for (const id of ids) {
     const loaded = await loadExperiment(projectRoot, id);
@@ -26198,7 +27249,7 @@ function generateExperimentId(suiteId, now = new Date) {
   return `abl-${date}-${suiteId}-${rand}`;
 }
 async function copyFixture(suitePath, fixtureDir, dest) {
-  const source = fixtureDir ? resolve31(dirname8(suitePath), fixtureDir) : join22(dirname8(suitePath), "fixture");
+  const source = fixtureDir ? resolve32(dirname10(suitePath), fixtureDir) : join23(dirname10(suitePath), "fixture");
   await mkdir20(dest, { recursive: true });
   if (existsSync8(source)) {
     await cp(source, dest, { recursive: true });
@@ -26222,11 +27273,11 @@ async function startHarnessExperiment(projectRoot, options) {
   };
   const root = experimentDir(projectRoot, experimentId);
   await mkdir20(root, { recursive: true });
-  await writeFile19(experimentYamlPath(projectRoot, experimentId), $stringify(experiment), "utf-8");
-  await writeFile19(join22(root, "EXPERIMENT.md"), formatExperimentMarkdown(experiment), "utf-8");
+  await writeFile20(experimentYamlPath(projectRoot, experimentId), $stringify(experiment), "utf-8");
+  await writeFile20(join23(root, "EXPERIMENT.md"), formatExperimentMarkdown(experiment), "utf-8");
   for (const task of suite.data.tasks) {
     for (const variantId of variants) {
-      const runRoot = join22(root, "runs", task.id, variantDirName(variantId));
+      const runRoot = join23(root, "runs", task.id, variantDirName(variantId));
       await copyFixture(suite.data.path, suite.data.fixtureDir, runRoot);
       await writeConfig(runRoot, structuredClone(DEFAULT_CONFIG), true);
       const disabled = variantId === "baseline" ? [] : options.components.filter((id) => variantIdFor(id) === variantId);
@@ -26238,7 +27289,7 @@ async function startHarnessExperiment(projectRoot, options) {
       });
       if (!overlay.success)
         return overlay;
-      await writeFile19(join22(runRoot, "TASK.md"), formatTaskCard(task, experimentId, variantId), "utf-8");
+      await writeFile20(join23(runRoot, "TASK.md"), formatTaskCard(task, experimentId, variantId), "utf-8");
     }
   }
   return ok(experiment);
@@ -26273,7 +27324,7 @@ var init_harness_experiment = __esm(() => {
 // src/core/evaluation/suite-run.ts
 import { spawnSync as spawnSync2 } from "node:child_process";
 import { existsSync as existsSync9 } from "node:fs";
-import { resolve as resolve32 } from "node:path";
+import { resolve as resolve33 } from "node:path";
 async function runHarnessSuiteTasks(projectRoot, suiteId, suitePath) {
   const suite = await loadHarnessSuite(projectRoot, suiteId, suitePath);
   if (!suite.success) {
@@ -26333,7 +27384,7 @@ function runTaskCommand(projectRoot, task) {
   if (parts.length === 0) {
     return { ok: false, detail: "Empty testCommand" };
   }
-  const bin = parts[0] === "bun" && existsSync9(resolve32(projectRoot, "src/cli/main.ts")) ? "bun" : parts[0];
+  const bin = parts[0] === "bun" && existsSync9(resolve33(projectRoot, "src/cli/main.ts")) ? "bun" : parts[0];
   const args = parts[0] === "bun" ? parts.slice(1) : parts.slice(1);
   const result = spawnSync2(bin, args, {
     cwd: projectRoot,
@@ -26384,11 +27435,11 @@ var init_suite_run = __esm(() => {
 });
 
 // src/core/evaluation/execution-profile.ts
-import { readFile as readFile32 } from "node:fs/promises";
-import { resolve as resolve33 } from "node:path";
+import { readFile as readFile34 } from "node:fs/promises";
+import { resolve as resolve34 } from "node:path";
 async function loadExecutionProfile(projectRoot, defaultTarget = "opencode") {
   try {
-    const content = await readFile32(resolve33(projectRoot, PROFILE_FILE), "utf-8");
+    const content = await readFile34(resolve34(projectRoot, PROFILE_FILE), "utf-8");
     const data = $parse(content);
     return ExecutionProfileSchema.parse(data);
   } catch {
@@ -26468,14 +27519,14 @@ var init_execution_profile = __esm(() => {
 });
 
 // src/core/evaluation/prompt-diff.ts
-import { readFile as readFile33, readdir as readdir10 } from "node:fs/promises";
-import { join as join23, resolve as resolve34 } from "node:path";
+import { readFile as readFile35, readdir as readdir11 } from "node:fs/promises";
+import { join as join24, resolve as resolve35 } from "node:path";
 function normalizeVersion(v) {
   return v.startsWith("v") ? v : `v${v}`;
 }
 async function listPromptFiles(dir) {
   try {
-    const entries = await readdir10(dir, { withFileTypes: true });
+    const entries = await readdir11(dir, { withFileTypes: true });
     return entries.filter((e) => e.isFile() && e.name.endsWith(".md")).map((e) => e.name);
   } catch {
     return [];
@@ -26518,30 +27569,30 @@ async function diffPromptVersions(fromVersion, toVersion, options = {}) {
   const fromV = normalizeVersion(fromVersion);
   const toV = normalizeVersion(toVersion);
   const searchRoots = [
-    resolve34(options.projectRoot ?? PACKAGE_ROOT, ".agents", "prompts"),
-    join23(ROOT_PRESETS_DIR, target, "prompts"),
-    join23(ROOT_PRESETS_DIR, "opencode", "prompts")
+    resolve35(options.projectRoot ?? PACKAGE_ROOT, ".agents", "prompts"),
+    join24(ROOT_PRESETS_DIR, target, "prompts"),
+    join24(ROOT_PRESETS_DIR, "opencode", "prompts")
   ];
   let fromDir = "";
   let toDir = "";
   for (const root of searchRoots) {
-    const f = join23(root, fromV);
-    const t = join23(root, toV);
+    const f = join24(root, fromV);
+    const t = join24(root, toV);
     try {
-      await readFile33(join23(f, "orchestrator.md"), "utf-8");
+      await readFile35(join24(f, "orchestrator.md"), "utf-8");
       fromDir = f;
       toDir = t;
       break;
     } catch {}
   }
   if (!fromDir) {
-    fromDir = join23(ROOT_PRESETS_DIR, "opencode", "prompts", fromV);
-    toDir = join23(ROOT_PRESETS_DIR, "opencode", "prompts", toV);
+    fromDir = join24(ROOT_PRESETS_DIR, "opencode", "prompts", fromV);
+    toDir = join24(ROOT_PRESETS_DIR, "opencode", "prompts", toV);
   } else {
     try {
-      await readFile33(join23(toDir, "orchestrator.md"), "utf-8");
+      await readFile35(join24(toDir, "orchestrator.md"), "utf-8");
     } catch {
-      toDir = join23(ROOT_PRESETS_DIR, "opencode", "prompts", toV);
+      toDir = join24(ROOT_PRESETS_DIR, "opencode", "prompts", toV);
     }
   }
   const fromFiles = await listPromptFiles(fromDir);
@@ -26559,12 +27610,12 @@ async function diffPromptVersions(fromVersion, toVersion, options = {}) {
     let oldText = "";
     let newText = "";
     try {
-      oldText = await readFile33(join23(fromDir, name), "utf-8");
+      oldText = await readFile35(join24(fromDir, name), "utf-8");
     } catch {
       oldText = "";
     }
     try {
-      newText = await readFile33(join23(toDir, name), "utf-8");
+      newText = await readFile35(join24(toDir, name), "utf-8");
     } catch {
       newText = "";
     }
@@ -26604,12 +27655,12 @@ var init_prompt_diff = __esm(() => {
 
 // src/core/evaluation/regression-checklist.ts
 import { execFileSync as execFileSync4 } from "node:child_process";
-import { mkdir as mkdir21, readFile as readFile34, writeFile as writeFile20 } from "node:fs/promises";
-import { dirname as dirname9, resolve as resolve35 } from "node:path";
+import { mkdir as mkdir21, readFile as readFile36, writeFile as writeFile21 } from "node:fs/promises";
+import { dirname as dirname11, resolve as resolve36 } from "node:path";
 async function loadRegressionChecklist() {
   try {
-    const path = resolve35(ROOT_PRESETS_DIR, "templates", "regression-checklist.yml");
-    const content = await readFile34(path, "utf-8");
+    const path = resolve36(ROOT_PRESETS_DIR, "templates", "regression-checklist.yml");
+    const content = await readFile36(path, "utf-8");
     const data = $parse(content);
     return data.checks ?? [];
   } catch {
@@ -26664,9 +27715,9 @@ async function runRegressionChecklist(projectRoot, options = {}) {
       checks,
       timestamp: new Date().toISOString()
     };
-    const outPath = resolve35(projectRoot, ".codeconductor/evaluation/regression-last.json");
-    await mkdir21(dirname9(outPath), { recursive: true });
-    await writeFile20(outPath, JSON.stringify(report, null, 2), "utf-8");
+    const outPath = resolve36(projectRoot, ".codeconductor/evaluation/regression-last.json");
+    await mkdir21(dirname11(outPath), { recursive: true });
+    await writeFile21(outPath, JSON.stringify(report, null, 2), "utf-8");
     return ok(report);
   } catch (e) {
     return err(e instanceof Error ? e : new Error(String(e)));
@@ -26708,8 +27759,8 @@ var init_model_comparison = __esm(() => {
 });
 
 // src/core/evaluation/cost-quality-matrix.ts
-import { writeFile as writeFile21 } from "node:fs/promises";
-import { resolve as resolve36 } from "node:path";
+import { writeFile as writeFile22 } from "node:fs/promises";
+import { resolve as resolve37 } from "node:path";
 async function buildCostQualityMatrix(projectRoot, outcomes) {
   const agg = aggregateOutcomes(outcomes);
   const rows = Object.entries(agg.byModel).map(([model, entry]) => {
@@ -26729,7 +27780,7 @@ async function buildCostQualityMatrix(projectRoot, outcomes) {
     rows
   };
   const dir = await ensureEvaluationDir(projectRoot);
-  await writeFile21(resolve36(dir, "matrix.yml"), $stringify(matrix), "utf-8");
+  await writeFile22(resolve37(dir, "matrix.yml"), $stringify(matrix), "utf-8");
   return matrix;
 }
 function formatMatrixMarkdown(matrix) {
@@ -26753,8 +27804,8 @@ var init_cost_quality_matrix = __esm(() => {
 });
 
 // src/core/evaluation/ablation-report.ts
-import { mkdir as mkdir22, writeFile as writeFile22 } from "node:fs/promises";
-import { resolve as resolve37 } from "node:path";
+import { mkdir as mkdir22, writeFile as writeFile23 } from "node:fs/promises";
+import { resolve as resolve38 } from "node:path";
 function isPass(o) {
   return o.verdict === "PASS" || o.status === "pass";
 }
@@ -26922,10 +27973,10 @@ function formatAblationMarkdown(report) {
 `);
 }
 async function persistAblationReport(projectRoot, markdown) {
-  const dir = resolve37(projectRoot, EVAL_DIR2);
+  const dir = resolve38(projectRoot, EVAL_DIR2);
   await mkdir22(dir, { recursive: true });
-  const path = resolve37(dir, "ablation-last.md");
-  await writeFile22(path, markdown, "utf-8");
+  const path = resolve38(dir, "ablation-last.md");
+  await writeFile23(path, markdown, "utf-8");
   return path;
 }
 var SCORE_THRESHOLD = 0.1, PASS_RATE_THRESHOLD = 0.05;
@@ -26939,8 +27990,8 @@ var exports_scorecard_command = {};
 __export(exports_scorecard_command, {
   scorecardCommand: () => scorecardCommand
 });
-import { readFile as readFile35 } from "node:fs/promises";
-import { resolve as resolve38 } from "node:path";
+import { readFile as readFile37 } from "node:fs/promises";
+import { resolve as resolve39 } from "node:path";
 function contractVersion() {
   return package_default.version;
 }
@@ -27221,13 +28272,13 @@ async function handleCompareModels(projectRoot, options) {
     outcomes = outcomes.filter((o) => options.modelsFilter.includes(o.model));
   }
   const markdown = generateModelComparisonMarkdown(outcomes, options.modelsFilter);
-  const templatePath = resolve38(projectRoot, ".codeconductor/evaluation/model-comparison-last.md");
+  const templatePath = resolve39(projectRoot, ".codeconductor/evaluation/model-comparison-last.md");
   try {
-    await readFile35(templatePath);
+    await readFile37(templatePath);
   } catch {}
-  const { writeFile: writeFile23, mkdir: mkdir23 } = await import("node:fs/promises");
-  await mkdir23(resolve38(projectRoot, ".codeconductor/evaluation"), { recursive: true });
-  await writeFile23(templatePath, markdown, "utf-8");
+  const { writeFile: writeFile24, mkdir: mkdir23 } = await import("node:fs/promises");
+  await mkdir23(resolve39(projectRoot, ".codeconductor/evaluation"), { recursive: true });
+  await writeFile24(templatePath, markdown, "utf-8");
   return {
     code: 0,
     data: {
@@ -28696,7 +29747,7 @@ var exports_seo_audit_command = {};
 __export(exports_seo_audit_command, {
   seoAuditCommand: () => seoAuditCommand
 });
-import { join as join24 } from "node:path";
+import { join as join25 } from "node:path";
 async function seoAuditCommand(options) {
   const { url, sitemap, format, failOn, delay: delay2, output, followRedirects, force } = options;
   if (!url && !sitemap) {
@@ -28709,7 +29760,7 @@ async function seoAuditCommand(options) {
       }
     };
   }
-  const defaultMarkdownPath = output === undefined && format === "markdown" ? join24("seo-reports", `audit-report-${new Date().toISOString().replace(/[:.]/g, "-").slice(0, 19)}.md`) : undefined;
+  const defaultMarkdownPath = output === undefined && format === "markdown" ? join25("seo-reports", `audit-report-${new Date().toISOString().replace(/[:.]/g, "-").slice(0, 19)}.md`) : undefined;
   const outputPathToWrite = output ?? defaultMarkdownPath;
   if (outputPathToWrite !== undefined) {
     const preflightError = await preflightContainedOutput(options.projectRoot, outputPathToWrite, { force });
@@ -28978,6 +30029,7 @@ init_errors();
 // src/cli/router.ts
 init_package();
 init_zod();
+init_runner_target();
 var OutputModeSchema = exports_external.enum(["json", "human"]);
 var SeoFormatSchema = exports_external.enum(["cli", "json", "markdown"]);
 var SeoFailOnSchema = exports_external.enum(["error", "warning", "never"]);
@@ -29094,6 +30146,10 @@ Published commands (package ${package_default.version}):
   seo llms                Generate llms.txt from a URL or sitemap
   doctor                  Validate configuration and generated files
   update                  Update installed presets
+  migrate                 Repair leftover artifacts a reinstall can't fix:
+                          rewrite invalid Write(path) permission rules to
+                          Edit(path) and dedupe, and delete orphaned
+                          .{target}/prompts/v{old}/ directories
   help                    Show general CLI usage and command list
   ask                     Recommend a /cc: slash command from a natural-language problem
   cc-help                 Show preset inventory (skills, subagents, commands)
@@ -29122,7 +30178,7 @@ Options:
   --output, -o            Output mode: human or json
   --lang                  Comma-separated list of languages (e.g., typescript,php,python)
   --locale                Instruction language for agent files: en (default) | es
-  --target                Runner target: opencode, claude, codex, gemini, cursor, agy, all
+  --target                Runner target: opencode, claude, codex, gemini, cursor, agy, pi, all
 
 Stack-specific presets (v0.4.0, registered in preset-registry):
   ts-next-drizzle         Next.js / Astro, Tailwind, Drizzle ORM, Bun, Postgres
@@ -29169,6 +30225,9 @@ Examples:
   npx cc-codeconductor install lsp --target claude --dry-run
   npx cc-codeconductor doctor
   npx cc-codeconductor update --dry-run
+  npx cc-codeconductor migrate --dry-run
+  npx cc-codeconductor migrate --global
+  npx cc-codeconductor migrate --file .claude/settings.local.json
   npx cc-codeconductor seo audit --url https://example.com
   npx cc-codeconductor seo audit --sitemap https://example.com/sitemap.xml
   npx cc-codeconductor seo audit --sitemap https://example.com/sitemap.xml --format markdown
@@ -29275,7 +30334,7 @@ async function routeCommand(args, projectRoot) {
     }
     case "install": {
       const isGlobal = options.global === true || options.global === "true";
-      const VALID_TARGETS = ["opencode", "claude", "codex", "gemini", "cursor", "agy", "all"];
+      const VALID_TARGETS = RUNNER_TARGETS;
       const VALID_INSTALL_SUBCOMMANDS = ["council", "preset", "lsp", ...VALID_TARGETS];
       if (subcommand && !VALID_INSTALL_SUBCOMMANDS.includes(subcommand)) {
         return unknownSubcommand("install", subcommand, VALID_INSTALL_SUBCOMMANDS);
@@ -29342,6 +30401,16 @@ async function routeCommand(args, projectRoot) {
         output: flags.output
       });
     }
+    case "migrate": {
+      const { migrateCommand: migrateCommand2 } = await Promise.resolve().then(() => (init_migrate_command(), exports_migrate_command));
+      return migrateCommand2({
+        projectRoot,
+        dryRun: flags.dryRun,
+        global: options.global === true || options.global === "true",
+        output: flags.output,
+        file: options.file
+      });
+    }
     case "help":
       return {
         code: 0,